Agent skill

Defi Amm Security

by affaan-m in affaan-m/ECC

DeFi自動マーケットメーカー(AMM)スマートコントラクトセキュリティ監査パターン。フラッシュローン、スリッページ、サンドイッチング攻撃、価格操作、再入攻撃、不正確な整数演算をカバー。

MITAuto-check passedBusiness, Finance & HR

Install Defi Amm Security

skills CLI
$ npx skills add affaan-m/ECC --skill defi-amm-security -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install affaan-m/ECC defi-amm-security --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/affaan-m/ECC.git skills-src && mkdir -p .claude/skills && cp -r skills-src/docs/ja-JP/skills/defi-amm-security .claude/skills/defi-amm-security && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
defi-amm-security
GitHub stars
276k
Token cost
~185 tokens
SKILL.md length
31 words
Files
1
Skills in repo
683
Repo updated
First seen
Licence
MIT

At a glance

DeFi自動マーケットメーカー(AMM)スマートコントラクトセキュリティ監査パターン。フラッシュローン、スリッページ、サンドイッチング攻撃、価格操作、再入攻撃、不正確な整数演算をカバー。

  • Works in 4 steps: フラッシュローン攻撃 → スリッページ不足 → 再入攻撃 → …
  • Tasks that involve Crypto and DeFi analysis
  • SKILL.md covers 使用時期, 一般的な脆弱性 and セキュリティチェックリスト
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Defi Amm Security is an agent skill from affaan-m/ECC. DeFi自動マーケットメーカー(AMM)スマートコントラクトセキュリティ監査パターン。フラッシュローン、スリッページ、サンドイッチング攻撃、価格操作、再入攻撃、不正確な整数演算をカバー。

Its SKILL.md is about 190 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Business, Finance & HR, covering Crypto and DeFi analysis. The repository describes itself as: The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond. The licence is MIT.

When your agent uses it

  • Tasks that involve Crypto and DeFi analysis

Example prompts

  • “/defi-amm-security”

Workflow steps

4 steps, taken from the step headings in SKILL.md.

  1. フラッシュローン攻撃
  2. スリッページ不足
  3. 再入攻撃
  4. 価格操作

What it can do on your machine

Read from SKILL.md and the folder at commit 4eb71d9. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Defi Amm Security loads about 185 tokens when it runs. Until then it costs about 28 tokens; SKILL.md has 31 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~28
When it runs · the whole SKILL.md, loaded when a task matches
~185

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from affaan-m/ECC at commit 4eb71d9, republished under its MIT licence (© affaan-m). 31 words, ~185 tokens.

Download SKILL.mdSave it as .claude/skills/defi-amm-security/SKILL.md (or your agent's skills folder).
name
defi-amm-security
description
DeFi自動マーケットメーカー(AMM)スマートコントラクトセキュリティ監査パターン。フラッシュローン、スリッページ、サンドイッチング攻撃、価格操作、再入攻撃、不正確な整数演算をカバー。
origin
ECC

DeFi AMM セキュリティ

自動マーケットメーカー(AMM)スマートコントラクトのセキュリティパターンと監査チェックリスト。

使用時期

  • Uniswap、Curve、BalancerなどのようなAMMコントラクトをレビュー
  • スワップ関数、ミント、バーンロジックでセキュリティの問題を検出
  • フラッシュローン、価格操作脆弱性を特定
  • DeFiプロトコルの経済セキュリティをテスト

一般的な脆弱性

1. フラッシュローン攻撃

ローンが同一ブロック内で返却されたと仮定するコントラクトを攻撃。

2. スリッページ不足

ユーザーが予期しない不利な価格変更を受ける。

3. 再入攻撃

外部呼び出し後の状態チェック。

4. 価格操作

オンチェーン価格参照の信頼不足。

セキュリティチェックリスト

  • すべての価格参照はオラクルから取得
  • フラッシュローンは考慮(価格を信頼しない)
  • スリッページ保護が実装
  • チェック・エフェクト・相互作用パターン使用
  • 再入保護(ミューテックス/チェック付き)
  • 整数オーバーフロー/アンダーフロー処理
  • アクセス制御とロール分離

詳細については、ドキュメントを参照してください。

© affaan-m, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in docs/ja-JP/skills/defi-amm-security of affaan-m/ECC.

Open the folder on GitHubat commit 4eb71d9

Compare with similar skills

Defi Amm Security next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Defi Amm Security compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Defi Amm Security this skillaffaan-m/ECC276k—~185Automated safety check: PassMIT
Technical Analysttradermonty/claude-trading-skills3k4 repos~4.6kAutomated safety check: PassMIT
Polyclawchainstacklabs/polyclaw3591 repos~2kAutomated safety check: PassApache-2.0
Longbridge Researchhelsome/folio2713 repos~2.1kAutomated safety check: PassMIT
Stock Analysis24mlight/StockClaw1012 repos~2kAutomated safety check: NotesMIT
Swapper Depositswapperfinance/swapper-toolkit852—~1.8kAutomated safety check: PassMIT

Similar skills

  • Technical Analyst

    tradermonty/claude-trading-skills

    This skill should be used when analyzing weekly price charts for stocks, stock indices, cryptocurrencies, or forex pairs.

    3k GitHub starsUsed in 4 repos~4.6k tokens
    Business, Finance & HRAuto-check passed
  • Polyclaw

    chainstacklabs/polyclaw

    Trade on Polymarket via split + CLOB execution. An agent skill from chainstacklabs/polyclaw.

    359 GitHub starsUsed in 1 repo~2k tokens
    Business, Finance & HRAuto-check passed
  • Longbridge Research

    helsome/folio

    Institution ratings, consensus price targets, EPS/revenue forecasts, finance calendar, shareholder data, fund holders, insider trades (SEC Form 4), short interest, industry rankings, peer group…

    271 GitHub starsUsed in 3 repos~2.1k tokens
    Business, Finance & HRAuto-check passed
  • Stock Analysis

    24mlight/StockClaw

    Analyze stocks and cryptocurrencies using Yahoo Finance data.

    101 GitHub starsUsed in 2 repos~2k tokens
    Business, Finance & HRAuto-check: notes
  • Swapper Deposit

    swapperfinance/swapper-toolkit

    Deposit and bridge funds into a wallet or protocol using Swapper Finance.

    852 GitHub stars~1.8k tokensUpdated 6 mo ago
    Business, Finance & HRAuto-check passed
  • Okx Cex Earn

    okx/agent-skills

    Manages OKX Simple Earn (flexible savings/lending), Flash Earn, On-chain Earn (staking/DeFi), Dual Investment (DCD/双币赢), and AutoEarn (自动赚币) via the okx CLI.

    187 GitHub starsUsed in 2 repos~3.3k tokens
    Business, Finance & HRAuto-check passed

More from affaan-m/ECC

All 682 skills in this repo
  • Skill Stocktake

    affaan-m/ECC

    Audits your installed Claude skills and commands for quality, with a quick mode for recently changed skills and a full mode that evaluates all of them through subagents.

    277k GitHub starsUsed in 5 repos~3.1k tokens
    Auto-check passed
  • Ingests, indexes, searches, edits and monitors video, audio and live streams through the VideoDB Python SDK, returning stream links, clips and timestamps.

    277k GitHub starsUsed in 3 repos~3.5k tokens
    Auto-check: notes
  • Docs Governance

    affaan-m/ECC

    Route broad documentation-governance requests to existing ECC skills and run an opt-in, read-only audit of mapped documentation roles, links, ADR indexes, and evidence references.

    277k GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Rules Distillation

    affaan-m/ECC

    Scans installed skills for principles that recur across them and proposes rule-file changes: append, revise, add a section, create a file or leave as covered.

    277k GitHub starsUsed in 2 repos~2.3k tokens
    Auto-check passed
  • Builds DRAFT counterparty agreements from one markdown template and a small JSON spec per party, with clauses picked by the party's role.

    277k GitHub stars~2.9k tokensUpdated today
    Auto-check passed
  • Set an ECC-specific frontend design direction for production UI work.

    277k GitHub starsUsed in 1 repo~2.2k tokens
    Auto-check passed

Questions about Defi Amm Security

What does Defi Amm Security do?

DeFi自動マーケットメーカー(AMM)スマートコントラクトセキュリティ監査パターン。フラッシュローン、スリッページ、サンドイッチング攻撃、価格操作、再入攻撃、不正確な整数演算をカバー。. Defi Amm Security is an agent skill from affaan-m/ECC.

When should I use Defi Amm Security?

Defi Amm Security fits situations like: tasks that involve Crypto and DeFi analysis.

How do I install Defi Amm Security in Claude Code?

Run `npx skills add affaan-m/ECC --skill defi-amm-security -a claude-code`. Or copy the skill folder (docs/ja-JP/skills/defi-amm-security in affaan-m/ECC) into .claude/skills/defi-amm-security in your project. Claude Code loads it when a task matches its description.

How do I install Defi Amm Security in Codex?

Run `npx skills add affaan-m/ECC --skill defi-amm-security -a codex`. Or copy the skill folder (docs/ja-JP/skills/defi-amm-security in affaan-m/ECC) into .agents/skills/defi-amm-security in your project. Codex loads it when a task matches its description.

Can I use Defi Amm Security in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add affaan-m/ECC --skill defi-amm-security -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/defi-amm-security, .gemini/skills/defi-amm-security, .github/skills/defi-amm-security and .opencode/skills/defi-amm-security in your project.

What does Defi Amm Security need to run?

SKILL.md names no scripts, command-line tools or credentials: Defi Amm Security is instructions for the agent only.

Does Defi Amm Security access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Defi Amm Security safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Defi Amm Security use?

Defi Amm Security is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Defi Amm Security use?

About 185 tokens (SKILL.md is roughly 740 characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Defi Amm Security?

Skills that share tags, products or a category with Defi Amm Security: Technical Analyst (tradermonty/claude-trading-skills, 3k stars), Polyclaw (chainstacklabs/polyclaw, 359 stars), Longbridge Research (helsome/folio, 271 stars) and Stock Analysis (24mlight/StockClaw, 101 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Defi Amm Security?

affaan-m (a GitHub user) maintains it in affaan-m/ECC, which has 276,111 GitHub stars. The repository holds 683 skills in this directory. The repository was last updated on October 10, 2026.

Source: affaan-m/ECC on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.