SkillPublic
contracts-overview
Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.
Quality
83%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Securityby
Passed
No findings from the security scan
Smart Contract Audit Catalog
Playbooks
| Skill | Use for |
|---|---|
/skills/standard/contracts/reentrancy/SKILL.md | Classic + read-only reentrancy |
/skills/standard/contracts/oracle-manipulation/SKILL.md | Single-block TWAP / spot price abuse |
/skills/standard/contracts/flash-loan/SKILL.md | Flash-loan callback + unauth gadgets |
/skills/standard/contracts/access-control/SKILL.md | Missing modifiers, wrong msg.sender |
/skills/standard/contracts/upgradeable-proxy/SKILL.md | Uninitialized impl, storage clash |
/skills/standard/contracts/signature-replay/SKILL.md | Cross-chain, ecrecover zero address |
Workflow
- Map the target:
bash("find /workspace/src -name '*.sol' | head -50") solidity_scan_fileon each file- Run slither:
bash("cd /workspace && slither . --json slither.json") slither_ingest("/workspace/slither.json")kg_query(kind="vulnerability", min_severity="high")to see the highs- For each high, generate a Foundry PoC via
foundry_reentrancy_testetc. bash("forge test -vvv --match-contract Test_")to run- Promote passing PoCs as validated findings
Default severity floor
| Impact | CVSS / Reward tier |
|---|---|
| Loss of user funds | Critical (9.8+) |
| Locked funds / permanent DoS | High (7.5-9.0) |
| Temporary DoS / griefing | Medium (5-7) |
| View-only data leak | Low (3-5) |
- Repository
PurpleAILAB/Decepticon
- Revision
49888ee
- Last updated
- First committed
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.