The Agent Skills Directory

[SAFE]: The skill serves as a comprehensive knowledge base for smart contract security auditing and testing. It focuses on well-established tools and methodologies used by professional auditors.
[EXTERNAL_DOWNLOADS]: The instructions document the installation of reputable development and security tools from official project websites and registries (e.g., Foundry via paradigm.xyz, Slither via Pip, and Aderyn via Cargo). These are industry-standard tools from well-known technology providers.
[REMOTE_CODE_EXECUTION]: The skill teaches the agent how to orchestrate security analysis by executing trusted CLI tools (Slither, Forge, Halmos) to identify vulnerabilities in user-provided smart contracts.
[CREDENTIALS_SAFE]: The skill includes proactive security advice, explicitly warning against committing private keys or .env files to version control and recommending the use of OIDC or cloud KMS for secure deployment workflows.
[COMMAND_EXECUTION]: The CI templates provided in the skill include specific hardening measures to prevent shell injection, such as advising against the use of user-controlled variables (like PR titles) directly in shell scripts.
[DATA_EXFILTRATION]: No patterns associated with unauthorized data access or external transmission were found. The skill emphasizes local analysis and standard reporting via established services like Codecov.

web3-testing