contracts-overview
Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.
68
Quality
85%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Securityby
Critical
Do not install without reviewing
Smart Contract Audit Catalog
Playbooks
| Skill | Use for |
|---|---|
/skills/standard/contracts/reentrancy/SKILL.md | Classic + read-only reentrancy |
/skills/standard/contracts/oracle-manipulation/SKILL.md | Single-block TWAP / spot price abuse |
/skills/standard/contracts/flash-loan/SKILL.md | Flash-loan callback + unauth gadgets |
/skills/standard/contracts/access-control/SKILL.md | Missing modifiers, wrong msg.sender |
/skills/standard/contracts/upgradeable-proxy/SKILL.md | Uninitialized impl, storage clash |
/skills/standard/contracts/signature-replay/SKILL.md | Cross-chain, ecrecover zero address |
Workflow
- Map the target:
bash("find /workspace/src -name '*.sol' | head -50") solidity_scan_fileon each file- Run slither:
bash("cd /workspace && slither . --json slither.json") slither_ingest("/workspace/slither.json")kg_query(kind="vulnerability", min_severity="high")to see the highs- For each high, generate a Foundry PoC via
foundry_reentrancy_testetc. bash("forge test -vvv --match-contract Test_")to run- Promote passing PoCs as validated findings
Default severity floor
| Impact | CVSS / Reward tier |
|---|---|
| Loss of user funds | Critical (9.8+) |
| Locked funds / permanent DoS | High (7.5-9.0) |
| Temporary DoS / griefing | Medium (5-7) |
| View-only data leak | Low (3-5) |
- Repository
- PurpleAILAB/Decepticon
- Commit
e34afba
- Last updated
- First committed
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.