web3-audit

Name: web3-audit
Availability: InStock
Author: mikacr1138

Identify and analyze DeFi smart contract vulnerabilities in Solidity and Rust audits.

2|1|Updated Mar 20, 2026

Search Tags:#solidity #foundry #defi #security-audit #smart-contract #vulnerability-analysis #grep-patterns

Ready to run

npx skills add https://github.com/Mikacr1138/claude-bug-bounty --skill web3-audit-mikacr1138

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/Mikacr1138/claude-bug-bounty/tree/main/skills/web3-audit
Command: npx skills add https://github.com/Mikacr1138/claude-bug-bounty --skill web3-audit-mikacr1138

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Smart contract vulnerabilities in DeFi are hard to detect and remediate across complex codebases.

Core Features & Use Cases

Ten bug classes coverage: accounting desync, access control, incomplete path, off-by-one, oracle, ERC4626, reentrancy, flash loan, signature replay, and proxy issues.
Pre-dive kill signals and a Foundry PoC template to accelerate triage and reproducibility.
grep patterns and ready-made templates to reproduce, verify, and remediate findings with real-world Immunefi paid examples.

Quick Start

Audit a Solidity project using the Foundry PoC template and grep patterns to surface vulnerabilities and prepare a remediation plan.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit DeFi smart contracts for vulnerabilities like reentrancy and oracle manipulation?▼

Audit DeFi smart contracts by analyzing ten bug classes including reentrancy, oracle, and flash loan vulnerabilities using grep patterns for rapid discovery and Foundry PoC templates to reproduce findings.

What are the most common DeFi smart contract vulnerability classes I should check during a security audit?▼

Common DeFi smart contract vulnerabilities include accounting desync, access control, incomplete path, off-by-one, oracle, ERC4626, reentrancy, flash loan, signature replay, and proxy issues.

How do I use Foundry to create a PoC for a smart contract vulnerability?▼

Use the Foundry PoC template provided to build reproducible proof-of-concept tests for smart contract vulnerabilities, accelerating triage and anchoring remediation with real-world Immunefi examples.

Can I use grep patterns to find Solidity security vulnerabilities in a large codebase?▼

Grep patterns enable rapid discovery of Solidity security vulnerabilities across large codebases, helping identify issues across ten bug classes before deeper manual analysis.

Does this smart contract audit approach work with both Solidity and Rust DeFi projects?▼

This smart contract audit methodology applies to both Solidity and Rust DeFi projects, covering ten bug classes with grep patterns and Foundry PoC templates for vulnerability identification.

What are pre-dive kill signals in a smart contract security audit?▼

Pre-dive kill signals help auditors quickly identify whether a smart contract target is worth deeper analysis, accelerating triage before committing to full vulnerability reproduction with Foundry PoC templates.