Automate smart contract security auditing and incident response for EVM targets.
npx skills add https://github.com/BBHGuild/bwc --skill bounty-hunter
Please help me install this Agent Skill. Skill: bounty-hunter Source: https://github.com/BBHGuild/bwc/tree/main/docs/src/skills/bounty-hunting Command: npx skills add https://github.com/BBHGuild/bwc --skill bounty-hunter
This Skill automates the process of finding security vulnerabilities in Ethereum smart contracts, writing proof-of-concept exploits, and assisting with security incident response.
Use the bounty-hunter skill to analyze the contract at address 0x123...abc for reentrancy vulnerabilities.
High-intent search queries and answers about installing and using this skill.
Smart contract vulnerability discovery uses the BWC taxonomy and Foundry to systematically identify reentrancy and other EVM security flaws. It generates proof-of-concept exploit code to confirm each vulnerability found during the audit.
PoC development generates working exploit code and Foundry test cases for EVM targets. By analyzing the target smart contract, it produces executable test cases that validate the discovered vulnerability during security auditing.
Incident response analysis assists in investigating smart contract hacks by developing mitigation strategies and writing postmortems. It applies specific response playbooks to manage security incidents and guide recovery workflows for compromised EVM targets.
Smart contract security auditing requires Forge, Cast, Anvil, Git, and Python3 installed. These dependencies provide the necessary environment to execute vulnerability discovery, generate PoCs, and run incident response scripts.
Bug bounty hunting using BWC taxonomy focuses specifically on EVM smart contracts. It is limited to vulnerability discovery, PoC generation, and incident analysis, and does not extend to non-EVM architectures or general web security audits.
The bounty-hunter skill supports exploit development by automating PoC generation for bug bounty hunting. It creates working exploit code and Foundry test cases to validate smart contract vulnerabilities before submission.
hairyfCompile, test, and fuzz smart contracts with Foundry's Forge.
shuvonsecAutomate Web3 bug bounty workflows with AI agents for recon, auditing, and PoC generation.
Canhada-LabsIdentify security vulnerabilities in EVM smart contracts and DeFi protocols.
trailofbitsAnalyze source code for security vulnerabilities using code graphs.
