web3-product-extension

Evaluate Web3 product changes for smart contract, signature, custody, oracle, and transaction risks.

4|Updated May 16, 2026
One-click install
npx skills add https://github.com/machenjie/rd-skills --skill web3-product-extension
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: web3-product-extension
Source: https://github.com/machenjie/rd-skills/tree/main/src/domain-extensions/web3-product-extension
Command: npx skills add https://github.com/machenjie/rd-skills --skill web3-product-extension

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill prevents unsafe Web3 product changes from shipping by enforcing security-critical rules across wallets, signatures, smart contracts, oracles, custody, and on-chain/off-chain consistency.

Core Features & Use Cases

  • Smart contract security enforcement: Applies reentrancy, integer-safety, access-control, and upgrade-governance checks to Solidity changes.
  • Signature integrity & replay protection: Ensures EIP-712 typed signing with complete domain fields (including chainId) and nonce/expiry style safety requirements.
  • Transaction lifecycle & on-chain realities: Requires reorg-aware state modeling and explicit confirmation for irreversible actions.
  • Oracle, L2, MEV, and bridging risk controls: Detects oracle staleness/manipulation risks, L2 finality assumptions, MEV exposure, and cross-chain consistency hazards.
  • Observability & audit readiness: Drives event-based audit trails and verification/audit obligations for high-value contract changes.

Quick Start

Use the web3-product-extension skill to assess a proposed Web3 change and receive a blocking/not-blocking verdict with a concrete checklist of required fixes and test/audit obligations.

Frequently Asked Questions about web3-product-extension

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check smart contract changes for reentrancy and asset loss risks?

To check smart contract changes for reentrancy and asset loss risks, evaluate Solidity modifications using CEI reentrancy protections, integer-safety, and access-control checks. This prevents unsafe Web3 product changes from shipping and causing irreversible financial loss.

How does EIP-712 typed signing prevent replay attacks across chains?

EIP-712 typed signing prevents replay attacks across chains by enforcing complete domain separator fields, including chainId binding. It also requires nonce and expiry style safety checks to ensure signature integrity and protect against unauthorized transaction replays.

What is the best way to protect DeFi transactions from oracle manipulation and MEV exposure?

The best way to protect DeFi transactions from oracle manipulation and MEV exposure is to implement oracle staleness and manipulation resistance controls. This includes modeling reorg-aware state assumptions and explicitly confirming irreversible actions before execution.

Does this Web3 security evaluation support L2 and bridging integrations?

Yes, this Web3 security evaluation supports L2 and bridging integrations by detecting L2 finality assumptions and cross-chain consistency hazards. It enforces non-custodial key handling and requires audit obligations for high-value contract changes.

Why do Web3 product changes require reorg-aware state modeling?

Web3 product changes require reorg-aware state modeling to handle transaction lifecycle realities and on-chain inconsistencies. It ensures explicit confirmation for irreversible actions, preventing state corruption and financial loss during blockchain reorganizations.

What are the custody security requirements for wallet and authentication integrations?

Custody security requirements for wallet and authentication integrations mandate non-custodial key handling and event-based audit trails. This observability ensures audit readiness and prevents unauthorized asset transfers during Web3 product changes.