smart-contract-auditing

Name: smart-contract-auditing
Availability: InStock
Author: nich

Audit EVM/DeFi smart contracts for exploitable vulnerabilities and protocol-level failure modes.

5|Updated May 2, 2026

Search Tags:#vulnerability assessment #solidity #reentrancy #defi security #exploit analysis #smart contract auditing #security tooling

Ready to run

npx skills add https://github.com/nirholas/three-ui --skill smart-contract-auditing

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: smart-contract-auditing
Source: https://github.com/nirholas/three-ui/tree/main/data/skills/security/smart-contract-auditing
Command: npx skills add https://github.com/nirholas/three-ui --skill smart-contract-auditing

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Smart-contract auditing helps you systematically find vulnerabilities and protocol-level risks so funds and users are not exposed to exploits.

Core Features & Use Cases

Adversarial Review Methodology: Build an auditor’s mental model (invariants, state-changing paths, trust boundaries) to reason about how code can break.
Vulnerability Taxonomy & Triage: Identify common classes like reentrancy, oracle manipulation, access control failures, integer math issues, and upgrade/storage collisions.
Actionable Audit Deliverables: Produce findings with severity classification (Critical/High/Medium/Low/Informational), evidence, impact analysis, and clear remediation guidance, including DeFi-specific checks for lending, AMMs/DEXes, vaults (ERC-4626), and stablecoin designs.

Quick Start

Use this skill to generate a full smart-contract audit plan and a prioritized vulnerability checklist for a DeFi lending protocol given its core contracts and documented invariants.

Frequently Asked Questions about smart-contract-auditing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit smart contracts for reentrancy and math safety vulnerabilities?▼

Smart contract auditing identifies exploitable vulnerabilities like reentrancy and integer math issues through manual code review, automated analysis, and attack simulation workflows. It verifies CEI checks, external-call safety, and protocol-level failure modes to protect funds.

What is the best way to perform DeFi security vulnerability assessments for ERC-4626 vaults?▼

DeFi security vulnerability assessments for ERC-4626 vaults apply adversarial review methodology and vulnerability taxonomy to identify protocol-level failure modes. They produce structured audit reports with severity classification, impact analysis, and clear remediation guidance.

How do I create a smart contract audit report with severity classification and PoC design?▼

Smart contract audit reports require findings with severity classification (Critical/High/Medium/Low/Informational), evidence, impact analysis, and remediation guidance. They integrate fuzz/property testing and PoC design to demonstrate exploitable vulnerabilities.

Can I use this methodology to audit lending protocols and AMMs for oracle manipulation?▼

Yes, adversarial review methodology applies to EVM/DeFi systems including lending protocols, AMMs/DEXes, and stablecoin designs. It identifies common vulnerability classes like oracle manipulation, access control failures, and upgrade/storage collisions.

What is needed to build an auditor's mental model for threat modeling and invariant verification?▼

Threat modeling and invariant verification require building an auditor's mental model of state-changing paths and trust boundaries. This approach uncovers authorization failures and protocol-level risks by reasoning about how code can break.

Does smart contract auditing cover fuzz testing and automated analysis for exploit analysis?▼

Smart contract auditing covers fuzz/property testing and automated analysis to perform exploit analysis. It simulates attacks against EVM systems to verify math safety, external-call integrity, and protocol-level failure modes.