web3-audit

Automates smart contract security audits for Solidity and Rust DeFi contracts.

3|Updated Jul 6, 2026
One-click install
npx skills add https://github.com/hataiit9x/Bbkit-AI --skill web3-audit-hataiit9x
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/hataiit9x/Bbkit-AI/tree/main/ref/claude-bug-bounty/skills/web3-audit
Command: npx skills add https://github.com/hataiit9x/Bbkit-AI --skill web3-audit-hataiit9x

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires web3, solidity, pygments, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill streamlines the process of auditing smart contracts, providing a comprehensive toolset for identifying common vulnerabilities in DeFi protocols.

Core Features & Use Cases

  • Bug Class Identification: Identifies 10 DeFi bug classes, including reentrancy, off-by-one, and oracle manipulation.
  • Pre-dive Kill Signals: Offers pre-audit checks to determine the worthiness of a contract audit.
  • Foundry PoC Template: Includes a template for creating proof-of-concept attacks using Foundry.
  • Grep Patterns: Provides grep patterns for each bug class to help automate the search process.
  • Real Examples: Cites real-world examples of smart contract vulnerabilities and their consequences.
  • Use Case: Conduct a thorough audit of a Solidity or Rust-based DeFi contract using this Skill to identify potential security issues.

Quick Start

Use the web3-audit skill to perform a smart contract security audit on the contract at address '0x...'.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a smart contract security audit for DeFi protocols?

To automate a smart contract security audit, this Skill identifies 10 known DeFi bug classes like reentrancy and oracle manipulation using grep patterns and pre-audit kill signals. It parses Solidity and Rust source code via Python to streamline vulnerability detection.

What common DeFi vulnerabilities should I check before auditing a smart contract?

Before auditing a smart contract, you should check for DeFi vulnerabilities such as reentrancy, off-by-one errors, and oracle manipulation. This Skill provides pre-dive kill signals to determine if a contract is worth auditing and identifies 10 common bug classes.

Can I use Foundry to create proof-of-concept attacks for identified smart contract bugs?

Yes, you can use Foundry to create proof-of-concept attacks for smart contract bugs. This Skill includes a Foundry PoC template specifically designed to help you validate and exploit the vulnerabilities discovered during your DeFi security audit.

Does this smart contract audit tool support both Solidity and Rust?

Yes, this smart contract audit tool supports both Solidity and Rust-based DeFi contracts. It requires Python for execution and parsing of the source code to identify known bug classes and perform comprehensive pre-audit checks.

How do I search for reentrancy vulnerabilities in Solidity source code?

To search for reentrancy vulnerabilities in Solidity source code, this Skill provides specific grep patterns for each bug class. These patterns automate the search process, helping you identify reentrancy and other issues across 10 known DeFi bug classes.

What is the best way to identify oracle manipulation in DeFi smart contracts?

The best way to identify oracle manipulation in DeFi smart contracts is using automated grep patterns and pre-audit checks. This Skill scans Solidity and Rust source code to detect oracle manipulation alongside 9 other known vulnerability classes.