contracts

스타9

포크0

업데이트2026년 6월 8일 15:21

Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.

설치

Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.

출처

MingyiSecLab

MingyiSecLab/Mingyi-Atlas

GitHub 저장소 열기 Creator 저장소 보기

다운로드

Smart Contract Audit Catalog

Playbooks

Skill	Use for
`/skills/standard/contracts/reentrancy/SKILL.md`	Classic + read-only reentrancy
`/skills/standard/contracts/oracle-manipulation/SKILL.md`	Single-block TWAP / spot price abuse
`/skills/standard/contracts/flash-loan/SKILL.md`	Flash-loan callback + unauth gadgets
`/skills/standard/contracts/access-control/SKILL.md`	Missing modifiers, wrong msg.sender
`/skills/standard/contracts/upgradeable-proxy/SKILL.md`	Uninitialized impl, storage clash
`/skills/standard/contracts/signature-replay/SKILL.md`	Cross-chain, ecrecover zero address

Workflow

Map the target: bash("find /workspace/src -name '*.sol' | head -50")
solidity_scan_file on each file
Run slither: bash("cd /workspace && slither . --json slither.json")
slither_ingest("/workspace/slither.json")
kg_query(kind="vulnerability", min_severity="high") to see the highs
For each high, generate a Foundry PoC via foundry_reentrancy_test etc.
bash("forge test -vvv --match-contract Test_") to run
Promote passing PoCs as validated findings

Default severity floor

Impact	CVSS / Reward tier
Loss of user funds	Critical (9.8+)
Locked funds / permanent DoS	High (7.5-9.0)
Temporary DoS / griefing	Medium (5-7)
View-only data leak	Low (3-5)

이 저장소의 다른 Skills

같은 저장소

benchmark

MingyiSecLab/Mingyi-Atlas

Benchmark mode marker — engagement objective is flag capture. Generic engagement rules apply unchanged.

2026-06-089

adcs-esc1

MingyiSecLab/Mingyi-Atlas

Exploit Active Directory Certificate Services ESC1 — vulnerable template allows arbitrary SAN, enabling user impersonation up to domain admin.

2026-06-089

bloodhound-query

MingyiSecLab/Mingyi-Atlas

BloodHound ingestion + canonical Cypher queries for AD attack-path enumeration. Run after collector dumps zip; promotes findings into the knowledge graph.

2026-06-089

netexec

MingyiSecLab/Mingyi-Atlas

NetExec (CrackMapExec successor) — unified SMB/LDAP/MSSQL/WinRM/RDP/SSH/FTP/VNC protocol auth + post-auth modules. 200+ modules incl. BloodHound auto-ingest, ESC1-15 scanning, PrintNightmare, LDAP relay.

2026-06-089

MingyiSecLab/Mingyi-Atlas

Active Directory attack lane — BloodHound ingestion, Kerberoasting, ADCS ESC scanning, DCSync, LAPS extraction.

2026-06-089

engagement-lifecycle

MingyiSecLab/Mingyi-Atlas

Red team engagement lifecycle management — initiation, phase transitions, go/no-go gates, deconfliction, emergency procedures, completion.

2026-06-089

name	contracts
description	Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.

Smart Contract Audit Catalog

Playbooks

Skill	Use for
`/skills/standard/contracts/reentrancy/SKILL.md`	Classic + read-only reentrancy
`/skills/standard/contracts/oracle-manipulation/SKILL.md`	Single-block TWAP / spot price abuse
`/skills/standard/contracts/flash-loan/SKILL.md`	Flash-loan callback + unauth gadgets
`/skills/standard/contracts/access-control/SKILL.md`	Missing modifiers, wrong msg.sender
`/skills/standard/contracts/upgradeable-proxy/SKILL.md`	Uninitialized impl, storage clash
`/skills/standard/contracts/signature-replay/SKILL.md`	Cross-chain, ecrecover zero address

Workflow

Map the target: bash("find /workspace/src -name '*.sol' | head -50")
solidity_scan_file on each file
Run slither: bash("cd /workspace && slither . --json slither.json")
slither_ingest("/workspace/slither.json")
kg_query(kind="vulnerability", min_severity="high") to see the highs
For each high, generate a Foundry PoC via foundry_reentrancy_test etc.
bash("forge test -vvv --match-contract Test_") to run
Promote passing PoCs as validated findings

Default severity floor

Impact	CVSS / Reward tier
Loss of user funds	Critical (9.8+)
Locked funds / permanent DoS	High (7.5-9.0)
Temporary DoS / griefing	Medium (5-7)
View-only data leak	Low (3-5)