web3-audit

Audit Solidity and Rust smart contracts for common vulnerability classes.

13|2|Updated Jun 1, 2026
One-click install
npx skills add https://github.com/pdparchitect/rook --skill web3-audit-pdparchitect
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/pdparchitect/rook/tree/main/skills/web3-audit
Command: npx skills add https://github.com/pdparchitect/rook --skill web3-audit-pdparchitect

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the high-stakes challenge of identifying critical vulnerabilities in Solidity and Rust smart contracts before they are exploited, preventing significant financial loss.

Core Features & Use Cases

  • Vulnerability Detection: Scans for 10 major bug classes including reentrancy, oracle manipulation, and accounting desynchronization.
  • Pre-dive Assessment: Provides a rigorous scoring rubric to determine if a DeFi protocol is worth the time and effort of a deep-dive audit.
  • Foundry Integration: Includes a standardized PoC template to validate findings and quantify economic impact for bug bounty submissions.

Quick Start

Run the web3-audit skill against the current directory to identify potential security flaws in the smart contract codebase.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit smart contracts for reentrancy and oracle manipulation vulnerabilities?

To audit smart contracts for reentrancy and oracle manipulation, you scan the codebase using static analysis patterns to identify 10 major bug classes. It assesses DeFi protocol risk and verifies exploitability to ensure high-fidelity vulnerability reporting.

What is a pre-dive assessment for DeFi protocol security audits?

A pre-dive assessment for DeFi protocol security audits is a rigorous scoring rubric used to determine if a protocol is worth the time and effort of a deep-dive audit. It helps prioritize targets before committing to a full security review.

Can I use Foundry to validate smart contract vulnerability findings?

Yes, you can use Foundry to validate smart contract vulnerability findings. This process utilizes a standardized Foundry-based proof-of-concept template to validate findings and quantify economic impact for bug bounty submissions.

Does this security audit approach work with both Solidity and Rust codebases?

Yes, this security audit approach works with both Solidity and Rust codebases. It targets DeFi protocols by applying static analysis patterns to identify critical vulnerabilities like accounting desynchronization and access control flaws.

What is the best way to report smart contract vulnerabilities for bug bounties?

The best way to report smart contract vulnerabilities for bug bounties is to validate findings with a standardized Foundry proof-of-concept template. This quantifies economic impact and verifies exploitability for high-fidelity reporting.