Covers the essential vulnerability patterns you need to know,reentrancy, access control failures, oracle manipulation, precision loss,with before/after code examples for each. The skill walks through a systematic audit process from static analysis with Slither and Mythril to fuzz testing and invariant checks in Foundry. What's genuinely useful here is the severity classification table and the audit checklist that maps common DeFi-specific risks like flash loan attacks and sandwich prevention. You get practical tooling commands and incident response steps, not just theory. The vulnerability quick reference alone saves you from having to remember which pattern prevents which exploit when you're reviewing code at 2am before a mainnet deployment.

skills.sh installs
263
GitHub stars
1
last updated
Aug 21, 2026

Install

$ npx -y skills add pluginagentmarketplace/custom-plugin-blockchain --skill smart-contract-security --agent claude-code

Installs into .claude/skills of the current project.

Files

Smart Contract Security Skill

Master smart contract security with vulnerability detection, auditing methodology, and incident response procedures.

Quick Start

# Invoke this skill for security analysis
Skill("smart-contract-security", topic="vulnerabilities", severity="high")

Topics Covered

1. Common Vulnerabilities

Recognize and prevent:

  • Reentrancy: CEI pattern violation
  • Access Control: Missing modifiers
  • Oracle Manipulation: Flash loan attacks
  • Integer Issues: Precision loss

2. Auditing Methodology

Systematic review process:

  • Manual Review: Line-by-line analysis
  • Static Analysis: Automated tools
  • Fuzzing: Property-based testing
  • Formal Verification: Mathematical proofs

3. Security Tools

Essential tooling:

  • Slither: Fast static analysis
  • Mythril: Symbolic execution
  • Foundry: Fuzzing, invariants
  • Certora: Formal verification

4. Incident Response

Handle security events:

  • Triage: Assess severity
  • Mitigation: Emergency actions
  • Post-mortem: Root cause analysis
  • Disclosure: Responsible reporting

Vulnerability Quick Reference

Sponsors

Details

Repository
github.com/pluginagentmarketplace/custom-plugin-blockchain
Categories
Security, DevOps & CI/CD, Web3 & Blockchain
First seen
Jun 3, 2026

More from pluginagentmarketplace/custom-plugin-blockchain

All 3

Recommended

More Security
1mikr13 avatarssh-hardeningmikr13/secure-server-setup-skillsHarden SSH configuration on VPS servers by disabling root login, enforcing SSH key authentication, and creating non-root sudo users to prevent unauthorized acce257skills.sh installs
2harperaa avatardependency-supply-chain-securityharperaa/secure-claude-skillsManage dependencies and supply chain security to prevent vulnerable or malicious packages. Use this skill when you need to audit dependencies, update packages, 253skills.sh installs
3harperaa avatarsecurity-headersharperaa/secure-claude-skillsConfigure security headers to defend against clickjacking, XSS, MIME confusion, and SSL stripping attacks. Use this skill when you need to set up Content-Securi203skills.sh installs
4harperaa avatarsecurity-architecture-overviewharperaa/secure-claude-skillsUnderstand the defense-in-depth security architecture of Secure Vibe Coding OS. Use this skill when you need to understand the overall security approach, the 5-200skills.sh installs
5cinience avataralicloud-security-content-moderation-green-testcinience/alicloud-skillsSmoke test for alicloud-security-content-moderation-green. Validate minimal authentication, API reachability, and one read-only query path.160skills.sh installs
6cinience avataralicloud-security-id-verification-cloudauth-testcinience/alicloud-skillsSmoke test for alicloud-security-id-verification-cloudauth. Validate minimal authentication, API reachability, and one read-only query path.156skills.sh installs