skills.rest
EntroVyx
EntroVyxCOMMUNITY
Explore all skills by this author →
GitHub

web3-audit

Identify critical security vulnerabilities in Solidity and Rust smart contracts.

3|1|Updated Jul 2, 2026
Search Tags:#security#vulnerability#audit#web3#foundry#defi#smart-contract
One-click install
npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill web3-audit-entrovyx
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/web3-audit
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill web3-audit-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured, high-impact methodology for identifying critical vulnerabilities in DeFi protocols, helping auditors focus on high-value bug classes rather than generic checklists.

Core Features & Use Cases

  • Bug Class Analysis: Covers 10 critical bug classes including reentrancy, oracle manipulation, and accounting desync with specific grep patterns for detection.
  • Pre-dive Kill Signals: Provides a scoring rubric to determine if a target is worth the audit effort based on TVL, audit history, and bounty potential.
  • Foundry PoC Template: Includes a standardized testing template to validate findings and prove impact for Immunefi submissions.

Quick Start

Use the web3-audit skill to analyze the current directory for potential accounting desynchronization bugs using the provided grep patterns.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit DeFi smart contracts for critical vulnerabilities like reentrancy and oracle manipulation?▼

Audit DeFi smart contracts by applying a structured 10-class bug analysis framework to identify critical reentrancy and oracle manipulation vulnerabilities using specific grep-based detection patterns.

How do I write a Foundry PoC to validate smart contract exploits for bug bounties?▼

Write a Foundry PoC using a standardized testing template designed to validate findings and prove exploit impact for Immunefi bug bounty submissions.

What's the best way to determine if a DeFi protocol is worth auditing before starting?▼

Determine if a DeFi protocol is worth auditing by applying a pre-dive scoring rubric that evaluates TVL, audit history, and bounty potential to identify high-value targets.

Can I use grep patterns to detect accounting desync bugs in Solidity and Rust smart contracts?▼

Yes, you can detect accounting desync bugs in Solidity and Rust smart contracts by applying specific grep patterns provided within the 10-class bug analysis framework.

What are the most critical bug classes to hunt for in Web3 security audits?▼

The most critical bug classes to hunt for in Web3 security audits include reentrancy, oracle manipulation, and accounting desynchronization, covered across a 10-class analysis framework.

Does this smart contract audit methodology work for both Solidity and Rust protocols?▼

Yes, the smart contract audit methodology works for both Solidity and Rust protocols, identifying critical security vulnerabilities through impact-driven hunting and Foundry PoC validation.

Related Skills

Explore More Software Engineering Skills→
0xhaaz0xhaaz

web3-audit

Identifies DeFi bug classes in Solidity/Rust contracts using grep patterns and Foundry PoC templates.

Community
Advanced
chatbotkitchatbotkit
13

web3-audit

Identify Solidity smart contract vulnerabilities across DeFi protocols.

Official
Advanced
shuvonsecshuvonsec
121

web3-bug-classes

Identify DeFi smart contract vulnerability classes for secure code reviews.

Community
Advanced
uphiagouphiago
1.1k

bug-bounty

Orchestrate bug bounty workflows with impact validation and CVSS 3.1 scoring.

Community
Advanced