shuvonsecCommunity·11 Agent Skills Included

web3-bug-bounty-hunting-ai-skills

Smart contract bug hunting, PoC exploits, and bounty reports

Guides smart contract security hunts from target scoring and recon through vulnerability discovery, proof-of-concept exploits, and Immunefi report submission. Covers all 10 major DeFi bug classes with grep patterns, Foundry test templates, and real paid bounty examples, eliminating manual pattern memorization and report drafting from scratch. Built from 2,749 Immunefi reports and 681 reproduced hacks to help hunters find valid bugs faster.

121|32

↗

npx skills add shuvonsec/web3-bug-bounty-hunting-ai-skills --all -g -y

All Skills in This Repository (11)

Pure Emerald Level Indicators

📦 In Repo

shuvonsec

web3-ai-tools

Automate Web3 bug bounty workflows with AI agents for recon, auditing, and PoC generation.

web3-hunt-foundation

Set up Web3 bug bounty hunts with mindset, recon, and a 10-point scorecard.

web3-bug-classes

Identify DeFi smart contract vulnerability classes for secure code reviews.

web3-triage-report

Triage smart-contract bug reports and format Immunefi-style vulnerability reports.

web3-case-study-role-misconfig

Audit role-based access controls in yield-aggregator contracts to detect missing DISTRIBUTOR_ROLE grants.

web3-poc-foundry

Assemble runnable Foundry PoC projects from templates and cheatcodes.

web3-solidity-audit-mcp

Audit Solidity contracts with Slither, Aderyn, and SWC detectors.

web3-methodology-research

Synthesize external audit methodology research from Web3 security sources.

web3-hunt-zksync-era

Analyze defense patterns in the ZKsync Era L2 bridge protocol.

web3-start-here

Navigate web3 smart contract security guides from 00-START-HERE.md to 36-solidity-audit-mcp.md.

web3-grep-arsenal

Run grep blocks to surface vulnerability patterns in Web3 smart contracts.

Community

Advanced

Frequently Asked Questions

FAQPage Schema

How to install web3-bug-bounty-hunting-ai-skills?▼

Run `npx skills add shuvonsec/web3-bug-bounty-hunting-ai-skills --all -g -y` in your terminal to install all skills globally.

What does this Web3 bug bounty skill set do?▼

It gives your coding assistant a complete smart contract security knowledge base covering target scoring, 10 DeFi bug classes, grep patterns, Foundry PoC templates, and Immunefi report formatting.

Which bug classes are covered?▼

All 10 major DeFi vulnerability classes including accounting desync, access control, oracle manipulation, reentrancy, flash loans, signature replay, and proxy upgrade bugs, each with real paid bounty examples.

Does it work with Claude Code and Cursor?▼

Yes. All skills follow the standard SKILL.md format and work in Claude Code, Cursor, and any assistant that reads skill files.

Can beginners use this for bug bounty hunting?▼

Yes. The skills are ordered from foundation to advanced, with a start-here index, step-by-step recon checklists, and copy-paste grep commands that require no prior audit experience.