agency-blockchain-security-auditor

Audits Solidity smart contracts for vulnerabilities and produces severity-classified audit reports with exploit proofs.

Updated Jul 27, 2026
One-click install
npx skills add https://github.com/imMamdouhaboammar/Mimera --skill agency-blockchain-security-auditor-immamdouhaboammar
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: agency-blockchain-security-auditor
Source: https://github.com/imMamdouhaboammar/Mimera/tree/main/.agents/skills/security-blockchain-security-auditor
Command: npx skills add https://github.com/imMamdouhaboammar/Mimera --skill agency-blockchain-security-auditor-immamdouhaboammar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Smart contract bugs can drain millions in user funds, and automated scanners alone miss logic flaws and economic exploits. This Skill provides a systematic audit workflow that combines manual line-by-line review, static analysis, fuzz testing, and adversarial economic modeling to find vulnerabilities before attackers do. ## Core Features & Use Cases - Vulnerability Detection: Identifies reentrancy, oracle manipulation, access control flaws, flash loan attacks, and front-running with annotated vulnerable/fixed Solidity code examples. - Tooling Integration: Provides ready-to-run Slither, Mythril, and Echidna analysis scripts plus Foundry proof-of-concept exploit tests. - Professional Reporting: Includes a complete audit report template with severity classifications (Critical through Informational), PoC requirements, and remediation guidance. - Use Case: Before deploying a DeFi lending protocol, run a full audit covering access control checklists, oracle staleness validation, and flash loan attack simulation, then deliver a stakeholder-ready report. ## Quick Start Audit the Solidity contracts in my contracts directory for reentrancy, oracle manipulation, and access control vulnerabilities, then produce a severity-classified audit report with proof-of-concept exploits.

Frequently Asked Questions about agency-blockchain-security-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Solidity smart contract for vulnerabilities?

Start with automated tools like Slither and Mythril for a first pass, then perform manual line-by-line review focusing on external calls, state changes, and access control. Every finding should include a Foundry proof-of-concept test demonstrating the exploit.

What tools are used for smart contract security analysis?

Slither handles static analysis with high-confidence detectors, Mythril performs symbolic execution, and Echidna runs property-based fuzz testing. Foundry is used to write reproducible exploit proof-of-concept tests against forked mainnet state.

How are smart contract audit findings classified by severity?

Critical means direct loss of user funds exploitable without privileges, High means conditional fund loss or privilege escalation, Medium covers griefing and temporary DoS, Low covers best-practice deviations, and Informational covers code quality issues.

Can automated tools like Slither find all smart contract bugs?

No, automated tools catch roughly 30% of real bugs and miss logic errors, economic exploits, and protocol-level vulnerabilities. Manual review is mandatory, especially for flash loan attack surfaces and oracle manipulation scenarios.

How do I detect oracle manipulation in DeFi lending protocols?

Check whether the protocol uses spot prices from DEX reserves, which attackers can skew with flash swaps. Secure implementations use Chainlink feeds with staleness validation or time-weighted average prices instead of instantaneous reserve ratios.