Best smart contract auditing skills for Claude Code, Codex and other agents.

Guides smart contract audits and bounty target selection with ten DeFi bug classes, kill signals, a Foundry PoC template and grep patterns.

awarexone/Agentic-Bug-Hunter

Generate Echidna/Medusa-compatible Solidity fuzz suites from Foundry or Hardhat projects.

pashov/skills

A master set of ten grep command blocks that surface likely vulnerability classes in Solidity source within the first 30 minutes of auditing a new protocol.

tradecatlabs/vibe-coding-cn

Generates an x-ray.md pre-audit report covering overview, enhanced threat model (protocol-type profiling, git-weighted attack surfaces, temporal risk analysis, composability dependency mapping)…

pashov/skills

Convert English-language properties in PROPERTIES.md (produced by the Fizz skill) into Solidity assertions inside the existing fuzz harness, then flip their checkboxes.

pashov/skills

A selection guide to AI-driven tools for Web3 bug bounty work, from autonomous web pentesters to smart contract bug finders, with notes on authorization.

tradecatlabs/vibe-coding-cn

Reconcile an existing Fizz harness with a changed source tree.

pashov/skills

Screens EVM and Solana meme coins for rug pull signs such as hidden mint, honeypot logic and fee tricks, starting with fast kill signals before any code review.

awarexone/Agentic-Bug-Hunter

Script-backed, out-of-box auditing workflow for Solidity/EVM repositories based on EVMbench detect/patch/exploit methodology.

greatpie/smart-contract-audit-skill

Security audit of Solidity code while you develop. An agent skill from Gabson0x/bountyforge.

Gabson0x/bountyforge

Runs Slither and Mythril against Solidity contracts to find reentrancy, overflow and access-control bugs before mainnet deployment, then triages and reports findings.

tradecatlabs/vibe-coding-cn

Guides Stellar blockchain development in Swift using stellar-ios-mac-sdk.

Soneso/stellar-ios-mac-sdk

Search Solodit for similar smart contract security findings.

marchev/claudit

End-to-end Stellar development playbook. An agent skill from VelaPayments/vela-payments.

VelaPayments/vela-payments

Token-efficient smart contract security auditing via Behavioral State Analysis (BSA).

quillai-network/quillshield_skills

Deep EVM smart contract security audit system. An agent skill from austintgriffith/ethskills.

austintgriffith/ethskills

Security audit of Solidity code while you develop. An agent skill from pashov/skills.

pashov/skills

Interactive smart contract security audit using Map-Hunt-Attack methodology with static analysis, parallel hunt lanes, skeptic-judge verification, and structured reporting.

Archethect/sc-auditor

Security review for Scalus/Cardano smart contracts. An agent skill from scalus3/scalus.

scalus3/scalus

Detects Denial of Service and griefing vulnerabilities in smart contracts.

quillai-network/quillshield_skills

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns.

wshobson/agents

Reference for ten classes of DeFi smart contract bugs, each with root cause, vulnerable code, fix, grep patterns and paid examples, for audits and bug bounty reviews.

tradecatlabs/vibe-coding-cn

Research notes drawn from Trail of Bits, SlowMist, ConsenSys, Immunefi and Cyfrin on smart contract audit methodology, with Slither, Echidna and Medusa setup.

tradecatlabs/vibe-coding-cn

Seven-question triage gate, Immunefi report format and dissected paid bounty examples for deciding whether a smart contract finding is worth submitting.

tradecatlabs/vibe-coding-cn

Detects unsafe external call patterns and token integration vulnerabilities in smart contracts.

quillai-network/quillshield_skills

Worked bug bounty case study of a yield aggregator: target scoring, fund-flow mapping, prior audit triage and a verdict per bug class, with role misconfiguration in focus.

tradecatlabs/vibe-coding-cn

Starting guide for Web3 bug bounty hunts: validating each finding, ten checks per external function, six questions to disprove your own bug, plus recon setup and target scoring.

tradecatlabs/vibe-coding-cn

Records a Web3 bug bounty hunt on ZKsync Era that ended with no findings, using it to show what a hardened protocol looks like and when to drop a target.

tradecatlabs/vibe-coding-cn

Detects input validation failures and arithmetic vulnerabilities in smart contracts.

quillai-network/quillshield_skills

Maps the state-changing entry points of a smart contract codebase and sorts them by access level, producing a structured audit report that leaves out read-only functions.

trailofbits/skills

Systematically detects all reentrancy vulnerability variants in smart contracts — classic, cross-function, cross-contract, and read-only reentrancy.

quillai-network/quillshield_skills

Annotates a codebase with unit, dimension and decimal-scaling comments to expose mismatches and formula bugs in DeFi, financial and scientific arithmetic.

trailofbits/skills

Security checklist for Solidity AMM contracts, liquidity pools, and swap flows.

affaan-m/ECC

Scans Solana programs for 6 critical vulnerabilities including arbitrary CPI, improper PDA validation, missing signer/ownership checks, and sysvar spoofing.

trailofbits/skills

Scans Algorand TEAL and PyTeal contracts for 11 known vulnerability patterns, such as unchecked rekeying and fees, and reports each with severity and a fix.

trailofbits/skills

Scans Cairo and StarkNet contracts for 6 vulnerability patterns, including felt252 overflow, L1 to L2 messaging faults, address conversion and signature replay.

trailofbits/skills

Scores a smart contract or blockchain codebase across 9 maturity categories with evidence, then delivers a scorecard and a priority-ordered improvement roadmap.

trailofbits/skills

Scans Cosmos SDK modules and CosmWasm contracts for consensus-critical flaws that can halt a chain, lose funds or diverge state, using parallel scanning agents.

trailofbits/skills

Guides through Trail of Bits' 5-step secure development workflow.

trailofbits/skills

A skill your agent uses when reviewing Swift Concurrency performance and responsiveness, including task explosions, actor hopping, MainActor bottlenecks, cancellation, AsyncSequence cleanup…

Livsy90/iOS-Performance-Agent-Skills

Deep reentrancy vulnerability analysis for Solidity contracts.

alt-research2/SolidityGuard

Analyze user callbacks for re-entrancy defects (deadlock, corruption)

ben-manes/caffeine

Trigger Pattern Always required for Soroban audits - Inject Into Breadth agents, depth agents

PlamenTSV/plamen

Comprehensive Solidity contract security scanner detecting 104 vulnerability patterns across reentrancy, access control, arithmetic, DeFi, proxy, and token categories.

alt-research2/SolidityGuard

Foundry and Soroban formal invariant verification register: state transition rules, boundary invariant properties, and symbolic execution checks.

sickn33/agentic-awesome-skills

Soroban WASM upgrade governance register: executable bytecode hash, timelocked migration delays, and multi-sig authorization quorum.

sickn33/agentic-awesome-skills

Soroban smart contract security audit register: authorization checks, panic pathways, integer overflows, and storage footprint verification for Stellar.

sickn33/agentic-awesome-skills

Automated market maker liquidity pool register: constant-product invariant curves, swap fee tiers, and LP token shares for Soroban DeFi.

sickn33/agentic-awesome-skills