web3-audit

Audit Solidity smart contracts for DeFi vulnerabilities and generate Foundry PoC templates.

3|Updated Nov 12, 2025
One-click install
npx skills add https://github.com/cmndcntrlcyber/rtpi --skill web3-audit-cmndcntrlcyber
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/cmndcntrlcyber/rtpi/tree/main/knowledge_seed/bug_hunter_skills/web3-audit
Command: npx skills add https://github.com/cmndcntrlcyber/rtpi --skill web3-audit-cmndcntrlcyber

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive approach to auditing smart contracts for common security vulnerabilities in DeFi protocols, offering a template for proof-of-concept (PoC) creation and grep patterns for code analysis.

Core Features & Use Cases

  • Smart Contract Security Audit: Identifies 10 critical bug classes in DeFi protocols.
  • Pre-dive Kill Signals: Offers guidelines for quickly determining if a contract is worth auditing.
  • Foundry PoC Template: Provides a template for creating PoCs using Foundry.
  • Grep Patterns: Includes grep patterns for identifying common security issues in Solidity code.
  • Real Examples: Includes real-world examples of paid security vulnerabilities from Immunefi.

Quick Start

Run the web3-audit skill to perform a security audit on your smart contract and generate a PoC.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit smart contracts for common DeFi vulnerabilities?

The 10 critical DeFi bug classes targeted during a smart contract security audit include common protocol vulnerabilities, which are identified using provided grep patterns and validated with real-world examples from Immunefi.

Do I need Foundry experience to generate a DeFi PoC template?

No, Foundry is not strictly required to use the grep patterns for static code analysis, but it is necessary if you want to generate and execute the proof-of-concept exploit templates provided by the Skill.

How do I quickly determine if a DeFi protocol is worth auditing?

You can quickly determine if a DeFi protocol is worth auditing by using the Skill's pre-dive kill signals, which offer guidelines for evaluating smart contracts before committing to a full security audit.

Can I use this skill to analyze Rust-based smart contracts?

Yes, you can analyze Rust-based smart contracts alongside Solidity, as the Skill applies to security audits of both languages, particularly when auditing DeFi protocols for common vulnerabilities.

What is the best way to find security issues in Solidity code?

The best way to find security issues in Solidity code is to apply the included grep patterns, which are designed to identify common DeFi vulnerabilities quickly before generating a proof-of-concept.