Security · Solidity

Guides smart contract audits and bounty target selection with ten DeFi bug classes, kill signals, a Foundry PoC template and grep patterns.

awarexone/Agentic-Bug-Hunter

Generate Echidna/Medusa-compatible Solidity fuzz suites from Foundry or Hardhat projects.

pashov/skills

Convert English-language properties in PROPERTIES.md (produced by the Fizz skill) into Solidity assertions inside the existing fuzz harness, then flip their checkboxes.

pashov/skills

Operates Flounder, an autonomous white-hat security auditor.

adshao/flounder

Script-backed, out-of-box auditing workflow for Solidity/EVM repositories based on EVMbench detect/patch/exploit methodology.

greatpie/smart-contract-audit-skill

Security audit of Solidity code while you develop. An agent skill from Gabson0x/bountyforge.

Gabson0x/bountyforge

Runs Slither and Mythril against Solidity contracts to find reentrancy, overflow and access-control bugs before mainnet deployment, then triages and reports findings.

tradecatlabs/vibe-coding-cn

Security audit of Solidity code while you develop. An agent skill from pashov/skills.

pashov/skills

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns.

wshobson/agents

Reference for ten classes of DeFi smart contract bugs, each with root cause, vulnerable code, fix, grep patterns and paid examples, for audits and bug bounty reviews.

tradecatlabs/vibe-coding-cn

Research notes drawn from Trail of Bits, SlowMist, ConsenSys, Immunefi and Cyfrin on smart contract audit methodology, with Slither, Echidna and Medusa setup.

tradecatlabs/vibe-coding-cn

Worked bug bounty case study of a yield aggregator: target scoring, fund-flow mapping, prior audit triage and a verdict per bug class, with role misconfiguration in focus.

tradecatlabs/vibe-coding-cn

Records a Web3 bug bounty hunt on ZKsync Era that ended with no findings, using it to show what a hardened protocol looks like and when to drop a target.

tradecatlabs/vibe-coding-cn

Security audit and code review for Solidity smart contracts.

sablier-labs/evm-monorepo

Prepare Solidity projects for a security audit — test coverage, test quality, NatSpec docs, code hygiene, dependency health, best-practice enforcement, deployment readiness, and project…

PlamenTSV/plamen

Detects input validation failures and arithmetic vulnerabilities in smart contracts.

quillai-network/quillshield_skills

Maps the state-changing entry points of a smart contract codebase and sorts them by access level, producing a structured audit report that leaves out read-only functions.

trailofbits/skills

Build metric-driven Chimera/create-chimera-app stateful invariant testing campaigns for Solidity projects.

aviggiano/security

Analyzes Solidity contract entry points to map attack surface.

alt-research2/SolidityGuard

Triages survived mutants and unnecessary test statements using Trailmark call-graph data, sorting them into false positives, missing unit tests and fuzzing targets.

trailofbits/skills

Gets your own codebase ready for an external security review: sets review goals, runs static analysis, raises test coverage, removes dead code and writes documentation.

trailofbits/skills

Reviews a smart contract project against Trail of Bits development guidelines, covering documentation, architecture, upgradeability, implementation quality, dependencies and tests.

trailofbits/skills

Security checklist for Solidity AMM contracts, liquidity pools, and swap flows.

affaan-m/ECC

Generates Foundry invariant tests and Echidna property-based fuzz tests for Solidity contracts.

alt-research2/SolidityGuard

Writes, reviews, and debugs property-based tests — Hypothesis, fast-check, proptest, jqwik, rapid, and Echidna or Medusa for Solidity invariants.

trailofbits/skills

Deep reentrancy vulnerability analysis for Solidity contracts.

alt-research2/SolidityGuard

Comprehensive Solidity contract security scanner detecting 104 vulnerability patterns across reentrancy, access control, arithmetic, DeFi, proxy, and token categories.

alt-research2/SolidityGuard

A skill your agent uses when you have a Foundry or Hardhat repository of Solidity or Vyper contracts and want the end-to-end EVM review workflow on native CLIs — a slither static pass, semgrep taint…

mtarcure/claude-vibe-squad

Comprehensive smart contract security audit framework with multi-expert analysis.

forefy/.context

A skill your agent uses when reviewing a Solidity, Vyper, or Rust (Solana/Anchor) smart contract for paid audit work or pre-launch sanity check.

elophanto/EloPhanto

Solidity security patterns, common vulnerabilities, and pre-deploy audit checklist.

austintgriffith/ethskills

A skill your agent uses when writing fuzz tests for Solidity contracts.

ccashwell/evm-cortex

Comprehensive reentrancy attack patterns and defenses for Solidity.

ccashwell/evm-cortex

A skill your agent uses when running Slither static analysis on Solidity contracts.

ccashwell/evm-cortex

Security-focused Solidity development patterns. An agent skill from ccashwell/evm-cortex.

ccashwell/evm-cortex

Operate Cyberful's pinned Foundry toolchain and engagement-owned Anvil lab for authorized EVM smart-contract bug bounty work.

cyberful/cyberful