web3-audit

Audit smart contracts for DeFi security vulnerabilities and Foundry exploit tests.

Updated Jun 24, 2026
One-click install
npx skills add https://github.com/Skobyn/talon --skill web3-audit-skobyn
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: web3-audit
Source: https://github.com/Skobyn/talon/tree/main/skills/web3-audit
Command: npx skills add https://github.com/Skobyn/talon --skill web3-audit-skobyn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Identifies security vulnerabilities in smart contracts, helping to prevent financial losses and ensure the reliability of DeFi protocols.

Core Features & Use Cases

  • Smart Contract Security Audit: Analyzes contract code for potential security issues.
  • Bug Classes: Identifies 10 DeFi bug classes, including reentrancy, flash loan attacks, and oracle manipulation.
  • Pre-dive Kill Signals: Provides criteria to determine if a contract is worth auditing based on its size and complexity.
  • Foundry PoC Template: Offers a template for creating proof-of-concept exploit tests using Foundry.

Quick Start

Analyze the smart contract at '0xContractAddress' for security vulnerabilities.

Frequently Asked Questions about web3-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit smart contracts for DeFi security vulnerabilities?

To audit smart contracts for DeFi vulnerabilities, you examine code for critical issues like reentrancy, flash loan attacks, and oracle manipulation. This process identifies 10 specific bug classes to prevent financial losses.

What are the most common DeFi bug classes to check for during a smart contract audit?

Common DeFi bug classes include reentrancy, flash loan attacks, and oracle manipulation. A comprehensive audit covers 10 distinct vulnerability categories designed specifically for DeFi protocols to ensure reliability.

Can I use Foundry to create proof-of-concept exploit tests for smart contract vulnerabilities?

Yes, you can use a Foundry PoC template to create proof-of-concept exploit tests for smart contract vulnerabilities. This allows you to actively validate and test identified security risks.

How do I determine if a smart contract is worth auditing before diving into the code?

To determine if a contract is worth auditing, you apply pre-dive kill signals. These criteria evaluate contract risk based on its size and complexity to prioritize security efforts.

Does this smart contract audit process support analyzing code by contract address directly?

Yes, the audit process supports analyzing smart contract code by providing a specific contract address. You can start vulnerability detection by targeting the deployed contract location directly.