What problem does it solve?
This Skill prevents unsafe Web3 product changes from shipping by enforcing security-critical rules across wallets, signatures, smart contracts, oracles, custody, and on-chain/off-chain consistency.
Core Features & Use Cases
- Smart contract security enforcement: Applies reentrancy, integer-safety, access-control, and upgrade-governance checks to Solidity changes.
- Signature integrity & replay protection: Ensures EIP-712 typed signing with complete domain fields (including chainId) and nonce/expiry style safety requirements.
- Transaction lifecycle & on-chain realities: Requires reorg-aware state modeling and explicit confirmation for irreversible actions.
- Oracle, L2, MEV, and bridging risk controls: Detects oracle staleness/manipulation risks, L2 finality assumptions, MEV exposure, and cross-chain consistency hazards.
- Observability & audit readiness: Drives event-based audit trails and verification/audit obligations for high-value contract changes.
Quick Start
Use the web3-product-extension skill to assess a proposed Web3 change and receive a blocking/not-blocking verdict with a concrete checklist of required fixes and test/audit obligations.