skills.rest
cybersecwoman
cybersecwomanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

web3-audit

Identifies and mitigates security vulnerabilities in DeFi smart contracts.

5|Updated May 27, 2026
Search Tags:#security audit#Rust#DeFi#smart contract#solidity#smart contract audit
One-click install
npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill web3-audit-cybersecwoman
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/cybersecwoman/Kiro-BugHunter/tree/main/skills/web3-audit
Command: npx skills add https://github.com/cybersecwoman/Kiro-BugHunter --skill web3-audit-cybersecwoman

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill unit addresses the problem of identifying and mitigating security vulnerabilities in smart contracts used by DeFi protocols.

Core Features & Use Cases

  • Smart Contract Security Audit: Analyzes smart contracts for common security issues like reentrancy, access control, and oracle manipulation.
  • Bug Class Identification: Identifies 10 DeFi bug classes, including accounting desynchronization and proxy issues.
  • Pre-dive Kill Signals: Provides pre-audit criteria to quickly determine if a contract is worth auditing based on factors like TVL and audit history.
  • Foundry PoC Template: Includes a template for creating proofs of concept using Foundry to demonstrate vulnerabilities.
  • Grep Patterns: Offers grep patterns to quickly search for specific vulnerabilities within the contract code.
  • Real Paid Examples: Includes real-world examples of vulnerabilities that have been paid out by Immunefi.
  • Use Case: Use this Skill to audit a Solidity or Rust-based DeFi contract and ensure its security before deploying it to the mainnet.

Quick Start

Use the web3-audit skill to scan the smart contract at '0x1234...5678' for security vulnerabilities.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a DeFi smart contract for security vulnerabilities?▼

Performing a smart contract security audit involves analyzing DeFi protocol code for reentrancy, access control, and oracle manipulation. You can utilize pre-audit kill signals, grep patterns, and Foundry PoC templates to identify and mitigate 10 distinct DeFi bug classes.

What are common DeFi security vulnerabilities to look for in Solidity and Rust?▼

Common DeFi security vulnerabilities include reentrancy, access control flaws, and oracle manipulation. Accounting desynchronization and proxy issues are also critical bug classes to identify when auditing Solidity or Rust protocols.

When should I run a pre-audit check on a smart contract?▼

Run a pre-audit check to quickly determine contract audit worthiness by evaluating kill signals like TVL and audit history. This prevents wasting time analyzing contracts that fail baseline security criteria.

How do I create a Foundry proof of concept for a smart contract vulnerability?▼

Create a Foundry proof of concept for smart contract vulnerabilities by utilizing pre-configured PoC templates. These templates demonstrate identified security issues like reentrancy or accounting desynchronization within DeFi protocols.

Does this smart contract audit approach work with both Solidity and Rust?▼

Yes, this smart contract audit approach analyzes both Solidity and Rust-based DeFi contracts. It applies grep patterns and vulnerability identification techniques to secure protocols before mainnet deployment.

Related Skills

Explore More Software Engineering Skills→
cmndcntrlcybercmndcntrlcyber
3

web3-audit

Audit Solidity smart contracts for DeFi vulnerabilities and generate Foundry PoC templates.

Community
Advanced
cholakovvvcholakovvv
71

foundry-poc-mainnet-fork

Generate Foundry proof-of-concept tests reproducing exploits on forked EVM networks.

Community
Advanced
ApegurusApegurus
1

unused-variables

Detect unused variables, parameters, and discarded return values in Solidity contracts.

Community
Basic
LerianStudioLerianStudio
205

ops-security-audit

Automate infrastructure security audits with phased scanning and compliance mapping.

Official
Advanced