New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Foundry Poc

by forefy in forefy/.context

Generates a Foundry PoC for smart contracts that scientifically proves the path from no special privileges to funds lost.

MITAuto-check passedBackend & APIs

Install Foundry Poc

skills CLI
$ npx skills add forefy/.context --skill foundry-poc -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install forefy/.context foundry-poc --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/forefy/.context.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/blockchain/foundry-poc .claude/skills/foundry-poc && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
foundry-poc
GitHub stars
152
Token cost
~534 tokens
SKILL.md length
173 words
Files
1
Skills in repo
20
Repo updated
First seen
Licence
MIT

At a glance

Generates a Foundry PoC for smart contracts that scientifically proves the path from no special privileges to funds lost.

  • Tasks that involve Smart contracts
  • SKILL.md covers Self-questioning and Proof explanation
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md
  • Tasks that involve Prototyping

What it does

Foundry Poc is an agent skill from forefy/.context. Generates a Foundry PoC for smart contracts that scientifically proves the path from no special privileges to funds lost. Focused on proof of concept for EVM using forge test.

Its SKILL.md is about 530 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts. Compatibility notes: Requires Foundry (forge); EVM project with foundry.toml

It sits in Backend & APIs, covering Smart contracts and Prototyping. The repository describes itself as: AI Agent Skills, Goals and Dynamic Workflows for Security Auditing, Pentesting and Research. The licence is MIT.

When your agent uses it

  • Tasks that involve Smart contracts
  • Tasks that involve Prototyping

Example prompts

  • “Use the foundry-poc skill to generate a Foundry PoC for smart contracts that scientifically proves the path from no special privileges to funds lost”
  • “/foundry-poc”

Requirements

  • Compatibility (from SKILL.md): Requires Foundry (forge); EVM project with foundry.toml

What it can do on your machine

Read from SKILL.md and the folder at commit c8ff161. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md (its code samples are solidity).

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

  • Compatibility

    Requires Foundry (forge); EVM project with foundry.toml

    From compatibility in the SKILL.md frontmatter.

Context cost

Foundry Poc loads about 534 tokens when it runs. Until then it costs about 47 tokens; SKILL.md has 173 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~47
When it runs · the whole SKILL.md, loaded when a task matches
~534

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from forefy/.context at commit c8ff161, republished under its MIT licence (© forefy). 173 words, ~534 tokens.

Download SKILL.mdSave it as .claude/skills/foundry-poc/SKILL.md (or your agent's skills folder).
name
foundry-poc
description
Generates a Foundry PoC for smart contracts that scientifically proves the path from no special privileges to funds lost. Focused on proof of concept for EVM using `forge test`.
compatibility
Requires Foundry (forge); EVM project with foundry.toml

You are an expert smart contract security researcher. Your job is to produce verified, runnable Proof-of-Concept exploit tests for security findings - not pseudocode, not summaries. Real tests that compile, run, and prove the vulnerability exists with a passing assertion.

  • Read the actual source before writing a single line of test code.
  • Expected chain is EVM, indicated by the existence of a foundry.toml file. forge test should be compatible to tested project.

Self-questioning

  • Did the poc successfully ran, compiled, and verified the issue?
  • Are the funds lost more than the attacker spends to perform the attack?
  • Is there a clear attacker and victim?
  • Is the conclusion quantified (e.g., "attacker drained 10 ETH") not vague?
  • Do the assertions in the test actually fail if the bug is fixed?
  • Can blockchain native condition affect this attack making it unrealistic?
  • Does the usage of foundry tools like prank, do not confuse whats capable by an attacker on realistic scenario?

Proof explanation

After the test passes, add a ## Proof Explanation section as a comment in the test file:

solidity
/*
 * ## Proof Explanation
 *
 * test_PoC_F01 proves reentrancy in Vault.withdraw():
 *
 * 1. Attacker deposits 1 ETH → balance[attacker] = 1 ETH
 * 2. Attacker calls withdraw(1 ETH) → Vault sends 1 ETH via .call{}()
 * 3. Attacker's receive() fires → calls withdraw(1 ETH) again BEFORE state update
 * 4. balance[attacker] still = 1 ETH → passes require check → sends another 1 ETH
 * 5. Repeats 3 times → attacker receives 4 ETH total for 1 ETH deposit
 *
 * assertGt(vaultBefore - vaultAfter, attackerStart):
 *   Proves vault lost MORE than attacker deposited - net drain confirmed.
 *
 * assertGt(address(attacker).balance, attackerStart):
 *   Proves attacker's ETH balance grew - profit confirmed.
 */

© forefy, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in skills/blockchain/foundry-poc of forefy/.context.

Open the folder on GitHubat commit c8ff161

Compare with similar skills

Foundry Poc next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Foundry Poc compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Foundry Poc this skillforefy/.context152—~534Automated safety check: PassMIT
Fizz Convertpashov/skills1.2k2 repos~3.7kAutomated safety check: PassMIT
Solana Devsolana-foundation/solana-dev-skill574—~3.8kAutomated safety check: PassMIT
Feynman Auditor0xiehnnkta/nemesis-auditor2431 repos~11kAutomated safety check: PassMIT
Smart Contract Auditgreatpie/smart-contract-audit-skill101—~1.1kAutomated safety check: PassNone
RadarAuditware/radar154—~2.1kAutomated safety check: PassGPL-3.0

Similar skills

  • Fizz Convert

    pashov/skills

    Convert English-language properties in PROPERTIES.md (produced by the Fizz skill) into Solidity assertions inside the existing fuzz harness, then flip their checkboxes.

    1.2k GitHub starsUsed in 2 repos~3.7k tokens
    Backend & APIsAuto-check passed

  • Solana Dev

    solana-foundation/solana-dev-skill

    A skill your agent uses when user asks to "build a Solana dapp", "write an Anchor program", "create a token", "debug Solana errors", "set up wallet connection", "test my Solana program", "fuzz my…

    574 GitHub stars~3.8k tokensUpdated today
    Backend & APIsAuto-check passed

  • Feynman Auditor

    0xiehnnkta/nemesis-auditor

    Deep business logic bug finder using the Feynman technique. An agent skill from 0xiehnnkta/nemesis-auditor.

    243 GitHub starsUsed in 1 repo~11k tokens
    Backend & APIsAuto-check passed

  • Smart Contract Audit

    greatpie/smart-contract-audit-skill

    Script-backed, out-of-box auditing workflow for Solidity/EVM repositories based on EVMbench detect/patch/exploit methodology.

    101 GitHub stars~1.1k tokensUpdated 7 mo ago
    Backend & APIsAuto-check passed

  • Radar

    Auditware/radar

    Use radar for smart contract security analysis, AST generation, and detection template development.

    154 GitHub stars~2.1k tokensUpdated 1 mo ago
    Backend & APIsAuto-check passed

  • Solidity Auditor

    Gabson0x/bountyforge

    Security audit of Solidity code while you develop. An agent skill from Gabson0x/bountyforge.

    443 GitHub stars~3.7k tokensUpdated 21 days ago
    Backend & APIsAuto-check passed

More from forefy/.context

All 20 skills in this repo

  • Google Docs Audit Reports

    forefy/.context

    Builds and formats security audit reports in Google Docs through the Docs API, with fixes for index drift, code styling and cross-reference links.

    152 GitHub stars~951 tokensUpdated 3 days ago
    Auto-check passed

  • Safe Multisig Governance Audit

    forefy/.context

    Audits the Safe multisig wallets of DeFi protocols for governance misconfigurations, scoring each against a finding library and producing a severity-ranked report.

    152 GitHub stars~1.4k tokensUpdated 3 days ago
    Auto-check passed

  • Cloud Bucket Exposure Finder

    forefy/.context

    Turns a company's domains into likely storage bucket names and checks six cloud providers for publicly readable buckets, for authorized security assessments only.

    152 GitHub stars~1.5k tokensUpdated 3 days ago
    Auto-check passed

  • Audit Scope

    forefy/.context

    Draft a security-audit scope from GitHub repos or API access, with a protocol narrative and a sizing table.

    152 GitHub stars~2.3k tokensUpdated 3 days ago
    Auto-check passed

  • External Enumeration

    forefy/.context

    Passively map a company's domains, subdomains, DNS ownership, tech stack, and CDNs.

    152 GitHub stars~3.1k tokensUpdated 3 days ago
    Auto-check passed

  • Smart Contract Audit

    forefy/.context

    Comprehensive smart contract security audit framework with multi-expert analysis.

    152 GitHub starsUsed in 1 repo~5.1k tokens
    Auto-check passed

Categories

Questions about Foundry Poc

What does Foundry Poc do?

Generates a Foundry PoC for smart contracts that scientifically proves the path from no special privileges to funds lost. context. Generates a Foundry PoC for smart contracts that scientifically proves the path from no special privileges to funds lost.

When should I use Foundry Poc?

Foundry Poc fits situations like: tasks that involve Smart contracts; tasks that involve Prototyping.

How do I install Foundry Poc in Claude Code?

Run `npx skills add forefy/.context --skill foundry-poc -a claude-code`. Or copy the skill folder (skills/blockchain/foundry-poc in forefy/.context) into .claude/skills/foundry-poc in your project. Claude Code loads it when a task matches its description.

How do I install Foundry Poc in Codex?

Run `npx skills add forefy/.context --skill foundry-poc -a codex`. Or copy the skill folder (skills/blockchain/foundry-poc in forefy/.context) into .agents/skills/foundry-poc in your project. Codex loads it when a task matches its description.

Can I use Foundry Poc in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add forefy/.context --skill foundry-poc -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/foundry-poc, .gemini/skills/foundry-poc, .github/skills/foundry-poc and .opencode/skills/foundry-poc in your project.

What does Foundry Poc need to run?

SKILL.md names no scripts, command-line tools or credentials: Foundry Poc is instructions for the agent only. Compatibility (from SKILL.md): Requires Foundry (forge); EVM project with foundry.toml.

Does Foundry Poc access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Foundry Poc safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Foundry Poc use?

Foundry Poc is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Foundry Poc use?

About 534 tokens (SKILL.md is roughly 2.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Foundry Poc?

Skills that share tags, products or a category with Foundry Poc: Fizz Convert (pashov/skills, 1.2k stars), Solana Dev (solana-foundation/solana-dev-skill, 574 stars), Feynman Auditor (0xiehnnkta/nemesis-auditor, 243 stars) and Smart Contract Audit (greatpie/smart-contract-audit-skill, 101 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Foundry Poc?

forefy (a GitHub user) maintains it in forefy/.context, which has 152 GitHub stars. The repository holds 20 skills in this directory. The repository was last updated on October 4, 2026.

Source: forefy/.context on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.