web3-audit

Name: web3-audit
Availability: InStock
Author: entrovyx

Identify critical security vulnerabilities in Solidity and Rust smart contracts.

3|1|Updated Jul 2, 2026

Search Tags:#security #vulnerability #audit #web3 #foundry #defi #smart-contract

Ready to run

npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill web3-audit-entrovyx

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/EntroVyx/hermes-agent-offsec/tree/main/skills/offsec/redteam/web3-audit
Command: npx skills add https://github.com/EntroVyx/hermes-agent-offsec --skill web3-audit-entrovyx

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured, high-impact methodology for identifying critical vulnerabilities in DeFi protocols, helping auditors focus on high-value bug classes rather than generic checklists.

Core Features & Use Cases

Bug Class Analysis: Covers 10 critical bug classes including reentrancy, oracle manipulation, and accounting desync with specific grep patterns for detection.
Pre-dive Kill Signals: Provides a scoring rubric to determine if a target is worth the audit effort based on TVL, audit history, and bounty potential.
Foundry PoC Template: Includes a standardized testing template to validate findings and prove impact for Immunefi submissions.

Quick Start

Use the web3-audit skill to analyze the current directory for potential accounting desynchronization bugs using the provided grep patterns.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit DeFi smart contracts for critical vulnerabilities like reentrancy and oracle manipulation?▼

Audit DeFi smart contracts by applying a structured 10-class bug analysis framework to identify critical reentrancy and oracle manipulation vulnerabilities using specific grep-based detection patterns.

How do I write a Foundry PoC to validate smart contract exploits for bug bounties?▼

Write a Foundry PoC using a standardized testing template designed to validate findings and prove exploit impact for Immunefi bug bounty submissions.

What's the best way to determine if a DeFi protocol is worth auditing before starting?▼

Determine if a DeFi protocol is worth auditing by applying a pre-dive scoring rubric that evaluates TVL, audit history, and bounty potential to identify high-value targets.

Can I use grep patterns to detect accounting desync bugs in Solidity and Rust smart contracts?▼

Yes, you can detect accounting desync bugs in Solidity and Rust smart contracts by applying specific grep patterns provided within the 10-class bug analysis framework.

What are the most critical bug classes to hunt for in Web3 security audits?▼

The most critical bug classes to hunt for in Web3 security audits include reentrancy, oracle manipulation, and accounting desynchronization, covered across a 10-class analysis framework.

Does this smart contract audit methodology work for both Solidity and Rust protocols?▼

Yes, the smart contract audit methodology works for both Solidity and Rust protocols, identifying critical security vulnerabilities through impact-driven hunting and Foundry PoC validation.