skills.rest
PurpleAILAB
PurpleAILABOFFICIAL
Explore all skills by this author →
WebsiteGitHub

oracle

Identifies common smart contract oracle vulnerabilities and provides fixes and audit guidance.

60|18|Updated Jan 21, 2026
Search Tags:#security#vulnerability#auditing#oracle#smart contracts#chainlink
One-click install
npx skills add https://github.com/PurpleAILAB/Vigilo --skill oracle-purpleailab
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: oracle
Source: https://github.com/PurpleAILAB/Vigilo/tree/main/packages/claude/skills/vulnerability-patterns/oracle
Command: npx skills add https://github.com/PurpleAILAB/Vigilo --skill oracle-purpleailab

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies and mitigates risks associated with oracle integrations in smart contracts, preventing vulnerabilities like stale data, manipulation, and downtime.

Core Features & Use Cases

  • Vulnerability Detection: Pinpoints common oracle exploits such as stale prices, deprecated functions, and decimal mismatches.
  • Secure Pattern Implementation: Provides examples of secure coding practices for oracle usage.
  • Audit Checklist: Offers a comprehensive checklist for thorough oracle security audits.
  • Use Case: An auditor can use this Skill to quickly scan a smart contract for known oracle vulnerabilities before a full manual review.

Quick Start

Use the oracle skill to check for stale price data in the provided Solidity code.

Frequently Asked Questions about oracle

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect stale price data vulnerabilities in Chainlink oracle integrations?▼

To detect stale price data vulnerabilities in Chainlink oracle integrations, analyze your Solidity code for insecure implementations, deprecated functions, and missing freshness checks. This process pinpoints exact vulnerabilities and provides secure alternative coding patterns.

What is oracle spot price manipulation and how do I mitigate it in smart contracts?▼

Oracle spot price manipulation is an exploit where attackers artificially distort asset prices fetched from decentralized exchanges. Mitigate it by analyzing your Solidity code for insecure oracle integrations and replacing them with secure alternative patterns like Time-Weighted Average Price (TWAP).

How do I check my smart contract for L2 sequencer downtime vulnerabilities?▼

Check for L2 sequencer downtime vulnerabilities by analyzing your Solidity code for missing sequencer uptime checks before fetching oracle data. This identifies the risk of reading stale prices during network outages and suggests secure coding alternatives.

How do I audit smart contracts for decimal precision mismatches in oracle price feeds?▼

Audit smart contracts for decimal precision mismatches by scanning your Solidity code for incorrect scaling factors when processing oracle price feeds. This analysis detects precision errors and provides secure coding practices to normalize data accurately.

What is included in an oracle security audit checklist for Solidity smart contracts?▼

An oracle security audit checklist for Solidity smart contracts includes checks for stale price data, deprecated Chainlink functions, L2 sequencer downtime, decimal precision mismatches, spot price manipulation, and oracle denial of service vulnerabilities.

Can I use this to scan deprecated Chainlink functions in my Solidity code?▼

Yes, you can scan deprecated Chainlink functions in your Solidity code by analyzing the source for insecure oracle integrations. The analysis identifies outdated function calls and offers secure alternatives to ensure reliable price feed operations.

Related Skills

Explore More Software Engineering Skills→
PurpleAILABPurpleAILAB
60

input-validation

Detect input validation vulnerabilities in Solidity smart contracts.

Official
Advanced
MLGBJDLWMLGBJDLW
1

security-review

Identify and remediate OWASP-aligned security vulnerabilities in codebases.

Community
Advanced
rajyeole6rajyeole6

agency-blockchain-security-auditor

Audit smart contracts for reentrancy, oracle manipulation, and access control vulnerabilities.

Community
Advanced
ayehiaaayehiaa

semgrep-rule-creator

Create Semgrep YAML rules with deterministic vulnerable and safe test cases.

Community
Advanced