web3-product-extension

What problem does it solve?

This Skill prevents unsafe Web3 product changes from shipping by enforcing security-critical rules across wallets, signatures, smart contracts, oracles, custody, and on-chain/off-chain consistency.

Core Features & Use Cases

• Smart contract security enforcement: Applies reentrancy, integer-safety, access-control, and upgrade-governance checks to Solidity changes.
• Signature integrity & replay protection: Ensures EIP-712 typed signing with complete domain fields (including chainId) and nonce/expiry style safety requirements.
• Transaction lifecycle & on-chain realities: Requires reorg-aware state modeling and explicit confirmation for irreversible actions.
• Oracle, L2, MEV, and bridging risk controls: Detects oracle staleness/manipulation risks, L2 finality assumptions, MEV exposure, and cross-chain consistency hazards.
• Observability & audit readiness: Drives event-based audit trails and verification/audit obligations for high-value contract changes.

Quick Start

Use the web3-product-extension skill to assess a proposed Web3 change and receive a blocking/not-blocking verdict with a concrete checklist of required fixes and test/audit obligations.