defi-amm-security

Security checklist for Solidity AMM contracts, liquidity pools, and swap flows. Covers reentrancy, CEI ordering, donation or inflation attacks, oracle manipulation, slippage, admin controls, and integer math. Use when auditing or writing Solidity AMM, liquidity pool, or swap code.

Quality

80%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Medium

Suggest reviewing before use

Quality

Content

68%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A tight, code-centric security reference with executable hardened patterns and a practical checklist, well-structured for in-context use. Its main weakness is workflow clarity: the audit/checklist flow lacks explicit validation feedback loops, capping that dimension.

Suggestions

Add an explicit audit workflow with validation checkpoints, e.g. 'Run slither; if findings appear, triage by category below and re-run; only proceed to fuzzing when slither is clean.'

Resolve undefined helper placeholders (_calculateOut, _executeSwap) in the slippage example or mark them as intentionally abstracted.

Consider splitting the per-pattern examples into a references/ file and keeping SKILL.md as an overview + checklist, which would push progressive disclosure toward a 5.

Dimension	Reasoning	Score
Conciseness	The body is lean: short prose takeaways ('Do not write your own guard when a hardened library exists.', 'Track internal accounting and measure actual tokens received.') and code-first examples with minimal preamble, though the 'How It Works' line and 'Execution Safety' paragraphs could be trimmed slightly.	4 / 5
Actionability	Provides copy-paste-ready Solidity snippets for each vulnerability pattern plus real audit commands (slither, echidna, forge), but a few examples reference undefined helpers like _calculateOut/_executeSwap, leaving minor gaps.	4 / 5
Workflow Clarity	It offers a usable sequence — review entrypoints against categories, apply the Security Checklist, then run audit tools — but validation checkpoints are implicit and there is no explicit 'if tool X fails, do Y' feedback loop, which the rubric treats as a validation gap.	3 / 5
Progressive Disclosure	Well-organized into clear sections (When to Use, How It Works, Execution Safety, Examples, Security Checklist, Audit Tools) with no nested or buried references; no bundle files exist so all content lives appropriately in SKILL.md, with only minor opportunity to split the examples library.	4 / 5
	Total	15 / 20 Passed

Description

92%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-scoped description that clearly states both capability and activation conditions with concrete vulnerability categories and natural trigger phrasing in third person. The only minor gap is trigger-term exhaustiveness, which keeps it just below a perfect mark on that single dimension.

Dimension	Reasoning	Score
Specificity	Enumerates multiple concrete capability areas — 'reentrancy, CEI ordering, donation or inflation attacks, oracle manipulation, slippage, admin controls, and integer math' — giving comprehensive, specific coverage rather than vague language.	5 / 5
Completeness	Explicitly states what it does ('Security checklist for Solidity AMM contracts... Covers...') and when to use it ('Use when auditing or writing Solidity AMM, liquidity pool, or swap code.'), satisfying both halves with concrete triggers.	5 / 5
Trigger Term Quality	Includes natural domain terms users would say ('Solidity AMM', 'liquidity pools', 'swap flows', 'auditing or writing') with synonym variants (AMM / liquidity pool / swap), but stops short of exhaustive phrasing a 5 would demand.	4 / 5
Distinctiveness Conflict Risk	The Solidity AMM / liquidity-pool / swap niche is sharply scoped with distinct triggers, making false-positive activation against unrelated skills unlikely.	5 / 5
	Total	19 / 20 Passed

Validation

93%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

Criteria	Description	Result
relative_links	Relative link issues: 1 missing	Warning

	Total	15 / 16 Passed

Repository: affaan-m/ECC
Path: skills/defi-amm-security/SKILL.md
Commit: 06c5e11

Reviewed: 3 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.