mx-ai-skills

Guidelines for establishing context before an audit.

Perform a comprehensive on-chain security audit of a deployed MultiversX smart contract. Use when reviewing a contract's security posture, permissions, state, and economic safety without source code.

Read on-chain state in MultiversX smart contracts. Use when accessing caller info, account balances, block timestamps, ESDT token metadata, local roles, code metadata, or any data from self.blockchain().

Gas-optimized cache patterns for MultiversX smart contracts using Drop-based write-back caches. Use when building contracts that read/write multiple storage values per transaction, DeFi protocols, or any gas-sensitive contract.

Identify ambiguous requirements and ask targeted clarifying questions for MultiversX development. Use when user requests are vague, missing technical constraints, or have conflicting requirements.

Comprehensive code analysis toolkit for MultiversX smart contracts. Covers differential review (version comparison, upgrade safety), fix verification (validate patches, regression testing), and variant analysis (find similar bugs across codebase). Use when reviewing PRs, verifying security patches, or hunting for bug variants.

Verify cryptographic operations execute in constant time to prevent timing attacks. Use when auditing custom crypto implementations, secret comparisons, or security-sensitive algorithms in smart contracts.

Access the global MultiversX documentation library to answer technical questions or verify implementation details.

Make cross-contract calls in MultiversX smart contracts. Use when calling another contract, handling callbacks, managing back-transfers, using typed proxies, or sending tokens via the Tx builder API (.tx().to()).

Read another contract's storage directly without async calls using storage_mapper_from_address. Use when building aggregators, controllers, or any contract that needs to read state from other same-shard contracts without proxy call overhead.

Cryptographic operations in MultiversX smart contracts. Use when hashing data (SHA256, Keccak256, RIPEMD160), verifying signatures (Ed25519, secp256k1, secp256r1, BLS), or encoding signatures in on-chain logic.

Audit frontend dApp components for security vulnerabilities in wallet integration and transaction handling. Use when reviewing React/TypeScript dApps using sdk-dapp, or assessing client-side security.

Adapt React applications to MultiversX blockchain with wallet connection, transactions, and smart contract interactions. Use when app needs Web3, blockchain, wallet login, crypto payments, NFTs, tokens, or smart contract calls.

Debug and analyze MultiversX transactions. Use when a transaction failed, returned unexpected results, or needs full decoding of inputs/outputs/events.

Financial math patterns for MultiversX smart contracts — precision management, half-up rounding, safe rescaling, and percentage calculations. Use when building any DeFi contract that handles financial calculations, fees, rates, or token math.

Deploy MultiversX smart contracts with pre-flight checks, verification, and post-deployment validation. Use when deploying a new contract to devnet, testnet, or mainnet.

Reviewing changes between versions of SCs (Upgradeability checks).

Identify and analyze MultiversX Smart Contract entry points (#[endpoint],

Factory pattern for deploying and managing child contracts from a parent manager. Use when building marketplaces, launchpads, multi-tenant systems, or any protocol that deploys child contracts from a template.

Verifying if a reported bug is truly fixed.

Atomic lend-execute-verify pattern for MultiversX smart contracts. Use when building flash loans, atomic swaps, temporary grants, or any operation that lends assets, executes a callback, and verifies repayment within a single transaction.

Handle payments in MultiversX smart contracts. Use when receiving, validating, or routing EGLD/ESDT payments via self.call_value(), Payment types, or payable endpoints. Covers single, multi, optional, and mixed payment patterns.

Production-grade project structure patterns for MultiversX smart contracts. Use when starting a new contract project, refactoring an existing one, or building multi-contract systems with shared code.

Assess codebase quality and maturity based on documentation, testing practices, and code hygiene indicators. Use when evaluating project reliability, estimating audit effort, or onboarding to new codebases.

Use property-based testing and fuzzing to find edge cases in smart contract logic. Use when writing comprehensive tests, verifying invariants, or searching for unexpected behavior with random inputs.

Deep protocol knowledge for MultiversX architecture including sharding, consensus, ESDT standards, and cross-shard transactions. Use when reviewing protocol-level code, designing complex dApp architectures, or troubleshooting cross-shard issues.

Comprehensive MultiversX smart contract security audit. Vulnerability patterns, ESDT safety, async callbacks, DeFi analysis, storage lifecycle, static analysis, Semgrep scanning, test verification. Use when performing security audits, code reviews, or setting up automated vulnerability detection.

Expert guidelines for developing, auditing, and optimizing MultiversX Smart Contracts (Rust).

Migrate legacy .scen.json scenario tests to Rust blackbox tests using `sc-meta scen-blackbox`. Use when a MultiversX smart contract project has existing scenario JSON files that need to be converted to the modern typed Rust test format.

Transaction construction and signing using Builders in Go SDK.

Core network operations for MultiversX Go SDK - Proxy, VM Queries.

Core data structures and types for MultiversX Go SDK.

Components for interacting with the blockchain (Wallets, Transaction Interactors, Nonce Handlers) in Go.

Smart contract operations for MultiversX TypeScript/JavaScript SDK.

Core SDK operations for MultiversX TypeScript/JavaScript - Entrypoints, Network Providers, and Transactions.

Token operations (ESDT/NFT/SFT) for MultiversX TypeScript/JavaScript SDK.

Wallet and key management for MultiversX TypeScript/JavaScript SDK.

Smart contract operations for MultiversX Python SDK.

Core SDK operations for MultiversX Python SDK - Entrypoints, Providers, and Network.

Transaction creation and token operations for MultiversX Python SDK.