web3-smart-contract
Installation
SKILL.md
What this skill does
Audits Solidity smart contracts and DeFi protocols against 10 high-frequency vulnerability classes: Accounting State Desynchronization, Access Control, Incomplete Code Path, Off-By-One, Oracle Manipulation, ERC4626 Attacks, Reentrancy, Flash Loan Attacks, Signature Replay, and Proxy/Upgrade Issues. Guides an auditor from pre-dive assessment through grep-pattern scanning, manual code review, Foundry proof-of-concept test writing, and severity-rated findings report generation.
When to use
- When performing a security audit of a Solidity smart contract or DeFi protocol
- When triaging a bug bounty submission involving a smart contract vulnerability
- When reviewing a protocol upgrade or new contract deployment before launch
- When estimating risk exposure of a protocol by TVL and audit history