CtrlK
BlogDocsLog inGet started
Tessl Logo

defi-amm-security

Security checklist for Solidity AMM contracts, liquidity pools, and swap flows. Covers reentrancy, CEI ordering, donation or inflation attacks, oracle manipulation, slippage, admin controls, and integer math.

72

Quality

91%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Medium

Suggest reviewing before use

SKILL.md
Quality
Evals
Security

Quality

Content

100%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A tight, actionable security skill: executable vulnerable/safe code pairs, a validation checklist, and safety guardrails, with no padding and no broken or nested references.

DimensionReasoningScore

Conciseness

Lean body with minimal prose; short directive lines like 'Do not write your own guard when a hardened library exists' and 'Track internal accounting and measure actual tokens received' earn their place without explaining concepts Claude already knows.

3 / 3

Actionability

Provides fully executable, copy-paste-ready Solidity for vulnerable vs. safe variants, concrete OpenZeppelin/Uniswap imports, and runnable audit commands (slither, echidna-test, forge test).

3 / 3

Workflow Clarity

The 'Security Checklist' acts as an explicit validation checkpoint to review every entrypoint against, and 'Execution Safety' adds preflight guardrails; the single-task checklist flow is unambiguous.

3 / 3

Progressive Disclosure

No bundle files exist under references/, scripts/, or assets/, so the self-contained body is appropriately organized into well-signaled sections (When to Use, How It Works, Examples, Security Checklist, Audit Tools) with no nested references.

3 / 3

Total

12

/

12

Passed

Description

82%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A specific, third-person description with strong trigger terms and a clear niche, but it omits an explicit 'Use when...' guidance clause, which caps completeness at 2.

Suggestions

Add an explicit 'Use when...' clause, e.g. 'Use when writing, auditing, or reviewing Solidity AMM or liquidity-pool contracts,' to satisfy the completeness 'when' requirement.

Consider adding common user phrasings like 'DEX', 'automated market maker', or 'pool exploit' to broaden natural trigger coverage.

DimensionReasoningScore

Specificity

Lists multiple concrete capability areas — 'reentrancy, CEI ordering, donation or inflation attacks, oracle manipulation, slippage, admin controls, and integer math' — naming specific actions rather than vague language.

3 / 3

Completeness

Clearly answers 'what' (a security checklist covering enumerated categories) but lacks an explicit 'Use when...' trigger clause, which caps completeness at 2 per the rubric guidelines.

2 / 3

Trigger Term Quality

Uses natural terms an auditor or Solidity dev would say ('Solidity AMM contracts, liquidity pools, and swap flows', 'reentrancy', 'oracle manipulation', 'slippage'), giving good coverage of the domain's vocabulary.

3 / 3

Distinctiveness Conflict Risk

The narrow niche of 'Solidity AMM contracts, liquidity pools, and swap flows' with domain-specific terms is clearly distinguishable and unlikely to trigger for unrelated skills.

3 / 3

Total

11

/

12

Passed

Validation

81%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation13 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

relative_links

Relative link issues: 1 missing

Warning

Total

13

/

16

Passed

Repository
affaan-m/ECC
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.