WEB3-AUDIT-SKILLS
Smart contract security audits across EVM, Solana, Move, Cairo
All Skills in This Repository (17)
Pure Emerald Level IndicatorsWeb3 Audit Plugin - Core Skill
Route smart contract security audits across EVM, Solana, Move, Cairo, CosmWasm, and TON.
Variant Analysis Skill
Hunt for vulnerability variants across the entire codebase using root-cause patterns.
Severity Classification Skill
Classify smart contract audit findings into HIGH, MEDIUM, LOW, and GAS severity levels.
TON Smart Contract Security Scanner
Detect security flaws in TON smart contracts written in FunC and Tact.
Solana Program Security Scanner
Scan Solana programs for security vulnerabilities and misconfigurations.
Solidity Scanner Skill
Analyze Solidity contracts for security vulnerabilities and generate remediation reports.
COSMOS-SCAN
Identify security vulnerabilities in Cosmos SDK modules, CosmWasm contracts, and IBC flows.
Commands Skill
Route slash commands to audit workflows for vulnerability analysis.
Cyfrin/Solodit Findings Database Integration
Query the Cyfrin/Solodit findings database for historical vulnerability research and audit enrichment.
Context Detection Skill
Detect protocol type from Solana smart contract source code and select matching audit templates.
Starknet Specialized Scanner
Detect Starknet Cairo contract vulnerabilities and audit security patterns.
Aptos Specialized Scanner
Detect Aptos-specific Move security vulnerabilities and generate prioritized remediation guidance.
Frequently Asked Questions
FAQPage SchemaHow to install WEB3-AUDIT-SKILLS?โผ
Run `npx skills add 0x-Shashi/WEB3-AUDIT-SKILLS --all -g -y` in your terminal to install all audit skills globally.
What blockchains does this audit suite support?โผ
It covers EVM chains (Ethereum, Arbitrum, Base), Solana, Aptos, Sui, Starknet, Cosmos, TON, Fuel, and Aztec, each with a dedicated scanner skill.
How does it detect smart contract vulnerabilities?โผ
It matches your code against 200+ vulnerability patterns extracted from 50,530 real audit findings, then runs severity classification, attack chain analysis, and variant hunting.
Does it work with Claude Code and Cursor?โผ
Yes. All skills follow the standard SKILL.md format and run in Claude Code, Cursor, and other compatible coding environments.
Can it generate a professional audit report?โผ
Yes. The report-writer skill produces structured findings with severity ratings, proof-of-concept code, and fix recommendations matching industry audit firm standards.
Related Repositories in Software Engineering
View All in Software Engineeringโopenclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core