CtrlK
BlogDocsLog inGet started
Tessl Logo

contracts-overview

Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.

61

Quality

73%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/standard/contracts/SKILL.md
SKILL.md
Quality
Evals
Security

Smart Contract Audit Catalog

Playbooks

SkillUse for
/skills/standard/contracts/reentrancy/SKILL.mdClassic + read-only reentrancy
/skills/standard/contracts/oracle-manipulation/SKILL.mdSingle-block TWAP / spot price abuse
/skills/standard/contracts/flash-loan/SKILL.mdFlash-loan callback + unauth gadgets
/skills/standard/contracts/access-control/SKILL.mdMissing modifiers, wrong msg.sender
/skills/standard/contracts/upgradeable-proxy/SKILL.mdUninitialized impl, storage clash
/skills/standard/contracts/signature-replay/SKILL.mdCross-chain, ecrecover zero address

Workflow

  1. Map the target: bash("find /workspace/src -name '*.sol' | head -50")
  2. solidity_scan_file on each file
  3. Run slither: bash("cd /workspace && slither . --json slither.json")
  4. slither_ingest("/workspace/slither.json")
  5. kg_query(kind="vulnerability", min_severity="high") to see the highs
  6. For each high, generate a Foundry PoC via foundry_reentrancy_test etc.
  7. bash("forge test -vvv --match-contract Test_") to run
  8. Promote passing PoCs as validated findings

Default severity floor

ImpactCVSS / Reward tier
Loss of user fundsCritical (9.8+)
Locked funds / permanent DoSHigh (7.5-9.0)
Temporary DoS / griefingMedium (5-7)
View-only data leakLow (3-5)
Repository
PurpleAILAB/Decepticon
Path

packages/decepticon/decepticon/skills/standard/contracts/SKILL.md

Commit

0cf691e

Last updated
First committed

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.

Claim skill