web3-audit

Analyze smart contracts for security vulnerabilities using predefined audit criteria.

Updated Jun 18, 2026
One-click install
npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill web3-audit-kisilev13
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/Kisilev13/Hermes-Agent-Workspace/tree/main/skills/web3-audit
Command: npx skills add https://github.com/Kisilev13/Hermes-Agent-Workspace --skill web3-audit-kisilev13

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a detailed framework for conducting thorough security audits on smart contracts, identifying potential vulnerabilities, and assessing the risk associated with DeFi protocols.

Core Features & Use Cases

  • Smart Contract Security Audit: Analyze smart contracts for common vulnerabilities like reentrancy, access control issues, and oracle manipulation.
  • Pre-dive Kill Signals: Use pre-defined criteria to quickly determine if a contract is worth auditing, saving time on low-value targets.
  • Foundry PoC Template: Offers a template for creating proof-of-concept attacks to validate vulnerabilities.
  • Real Paid Examples: Provides real-world examples of vulnerabilities that have been exploited, illustrating the potential impact.

Quick Start

Use the web3-audit skill to conduct a security audit on the contract 'MyContract.sol'.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a smart contract security audit for DeFi protocols?

A smart contract security audit analyzes DeFi protocols for vulnerabilities like reentrancy and access control issues using predefined criteria. This process assesses protocol risks and validates identified attack vectors using proof-of-concept templates.

What are pre-dive kill signals in smart contract vulnerability analysis?

Pre-dive kill signals are predefined criteria used to quickly evaluate if a contract is worth auditing. By filtering out low-value targets early, they save significant time during the vulnerability analysis process.

How do I create a Foundry proof-of-concept to validate smart contract vulnerabilities?

You validate smart contract vulnerabilities by creating a Foundry proof-of-concept attack using provided templates. This confirms the exploitability of flaws like reentrancy and access control issues within the target contract.

Does this smart contract audit framework work for common DeFi vulnerabilities?

Yes, this smart contract audit framework specifically targets common DeFi vulnerabilities including oracle manipulation, access control issues, and reentrancy. It uses real paid examples of exploited vulnerabilities to illustrate potential protocol impact.

What do I need to know before starting a smart contract security audit?

Before starting a smart contract security audit, you need knowledge of smart contract security principles and the ability to create proof-of-concept attacks. Familiarity with vulnerability analysis criteria and Foundry templates is also highly recommended.