skills.rest
brucesongs
brucesongsCOMMUNITY
Explore all skills by this author →
GitHub

blockchain-web3

Identify and remediate security weaknesses in blockchain and Web3 contract code.

60|14|Updated Apr 27, 2026
Search Tags:#security#tooling#auditing#blockchain#web3#solidity#smart-contracts
One-click install
npx skills add https://github.com/brucesongs/kali-claw --skill blockchain-web3-brucesongs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: blockchain-web3
Source: https://github.com/brucesongs/kali-claw/tree/main/skills/blockchain-web3
Command: npx skills add https://github.com/brucesongs/kali-claw --skill blockchain-web3-brucesongs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Blockchain and Web3 applications require rigorous security auditing to prevent financial losses, faulty logic, and governance risks. This Skill provides a structured framework that combines static and dynamic analysis, exploit PoCs, and defense validation to identify and remediate vulnerabilities across smart contracts and on-chain protocols.

Core Features & Use Cases

  • End-to-end Smart Contract Security: static analysis with Slither/Mythril, dynamic testing with Foundry, and invariant testing with Echidna/Certora.
  • Practical Use Cases: pre-deploy audits for new protocols, post-incident forensics to reverse-engineer exploits, cross-chain DeFi security reviews, and governance/upgrade safety checks.
  • Audit Playbook & Deliverables: guides for recon, threat modeling, PoC creation, regression tests, and formal verification alignment.

Quick Start

Scan your Solidity repository to produce an audit plan, PoC, and remediation steps.

Frequently Asked Questions about blockchain-web3

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a PoC-driven smart contract audit?▼

A PoC-driven smart contract audit combines static analysis tools like Slither with dynamic testing to identify vulnerabilities, reverse-engineer exploits, and validate remediation through reproducible Proof of Concept workflows.

How do I audit Solidity smart contracts using Foundry and Slither?▼

You audit Solidity smart contracts by running static analysis with Slither or Mythril, executing dynamic tests and PoCs with Foundry, and performing invariant testing using Echidna or Certora to verify security properties.

Can I use automated analysis for post-incident DeFi forensics?▼

Yes, you can use automated analysis for post-incident forensics to reverse-engineer exploits on Ethereum and EVM-compatible chains by verifying on-chain bytecode and validating faulty logic against reproducible PoC workflows.

What is the best way to test upgrade pathways and governance safety in Web3 protocols?▼

The best way to test upgrade pathways is applying formal verification alignment and invariant testing with Echidna or Certora to validate governance logic and ensure secure contract upgrade mechanisms across Web3 protocols.

Do I need source Solidity files to run Echidna and Certora invariant tests?▼

Yes, you need access to source Solidity files to run Echidna and Certora invariant tests, along with reproducible PoC workflows to verify against on-chain bytecode and upgrade pathways during security audits.

Related Skills

Explore More Software Engineering Skills→
LeoWSY-hashblueLeoWSY-hashblue
3

blockchain-security

Analyze Solidity contracts for security flaws and DeFi exploit patterns.

Community
Advanced
seandkendallseandkendall
7

securing-s3-buckets

Audit and secure S3 buckets with encryption, logging, and access controls.

Community
Advanced
PriyanshKuniyalPriyanshKuniyal

attack-tree-construction

Develop and visualize attack trees for security threat assessment.

Community
Intermediate
harshaldhadukharshaldhaduk
1

github-code-review

Automate GitHub pull request reviews with parallel specialized agents.

Community
Advanced