Thanas-flare-builders-toolkit

Master skill for building, testing, auditing, and deploying smart contracts on the Flare-family EVM chains (Flare, Songbird, Coston2). Use this skill as the entry point for any Flare-related development task. It bundles 16 specialized sub-skills covering: chain registry and addresses (Permit2, Multicall3, DEXes, routers, tokens), Flare protocols (FTSO, FDC, FAssets, Smart Accounts), Enosys contracts and rewards, security-first Solidity standards, Flare-specific audit checklists (Permit2 chain availability, fee-on-transfer detection, blacklistable token surface, basefee floors, FTSO redistributor proxy upgradeability), the cross-project lessons-learned from real Flare builds, and the audit/gas/test workflow (`audit`, `audit-contract`, `gas-optimize`, `test-foundry`, `test-hardhat`). Trigger on: any Flare/Songbird/Coston2 development question, "how do I X on Flare", security review request, audit kickoff, contract verification on flare-explorer or flarescan, address lookup, RPC selection, FTSO reward claim, FAs

Hard-won, cross-project lessons from building, deploying, and operating Flare-family (Flare / Songbird / Coston2) dApps. Use this skill whenever the user is: deploying or interacting with a Flare/Songbird/Coston2 contract, building a frontend with RainbowKit + Wagmi for Flare chains, writing Foundry fork tests against Flare-family state, claiming or rotating FTSO reward redistributors, debugging a stuck or silently-failing transaction, choosing RPC endpoints for browser vs server use, or troubleshooting MetaMask / wallet connection on Flare. Trigger on any mention of: Flare RPC, Songbird canary, Coston2 testnet, FTSO reward claim, WNAT vote-power, FlareDrops, FtsoRewardRedistributor, FlaresRewardsRedistributorForNft, Enosys redistributor, RainbowKit MetaMask hang, Ankr origin locked, Multicall3 on Flare, EIP-150 63/64 gas, eth_getLogs 30-block cap, "why is my Flare contract test failing in CI", "why did my claim transaction return zero", "Wrap SGB to WSGB", or any question about gotchas specific to Flare-fami

Provides domain knowledge and guidance for Flare FAssets—wrapped tokens (FXRP, FBTC, etc.), minting, redemption, agents, collateral, and smart contract integration. Use when working with FAssets, FXRP, FBTC, FAssets minting or redemption, Flare DeFi, agent/collateral flows, or Flare Developer Hub FAssets APIs and contracts.

Security-first checklist for Flare-family contract design, deployment, and audit. Covers both (1) GENERIC EVM security patterns the user must apply by default — Ownable2Step over Ownable, ReentrancyGuardTransient, SafeERC20, CEI, custom errors, no tx.origin, bounded loops, pull-over-push, immutable for constructor values — and (2) FLARE-SPECIFIC overlays that the generic audit skills don't catch: Permit2 chain availability, fee-on-transfer detection, blacklistable stablecoin surface, FTSO redistributor proxy upgradeability, basefee floors on testnets, public RPC log-range caps, EIP-3855 PUSH0 status. Use whenever you're designing or reviewing a contract that will live on Flare/Songbird/Coston2, before EVERY mainnet deploy, and as the gate for the `audit` and `audit-contract` skills' scope. Trigger on: "security review", "audit checklist", "is this safe for Flare", "ownership", "reentrancy", "Permit2 on Songbird", "blacklistable token", "FoT detection", "should I use OZ or transient guard".

Analyze a Solidity contract for gas optimization opportunities. Identifies savings with specific techniques, gas numbers, and before/after code. Covers L1 and L2 considerations.

Generate a comprehensive Foundry/Forge test suite for a Solidity contract. Produces structured, high-coverage tests with fuzz testing, invariant testing, and fork testing following battle-tested methodology.

Adversarial smart contract security audit. Auto-selects 5-7 specialist agents based on contract features (from a roster of 12). Attacks from every relevant angle: SWC registry, signatures, reentrancy, state machine, ERC20 edge cases, economic exploits, game theory, L2-specific, flash loans, DoS/griefing, privacy, backend integration, external boundary verification (live ABI / selector / hash checks against canonical references). Runs Slither if available. Writes Foundry PoC tests for critical findings. Produces a ranked finding list with severity and code fixes. Triggers on: "audit this contract", "security review", "attack this contract", "find vulnerabilities".

Essential reference skill for Enosys Global DeFi protocol development on the Flare Network and its related chains. Use this skill whenever Darren asks about: interacting with Enosys smart contracts (DEX V2, DEX V3/CLMM, Loans/CDP, APYCloud, Governance), writing new Solidity contracts that integrate with Enosys products, building scripts or tools that call Enosys contract functions, understanding how Enosys products work internally, looking up contract addresses on Flare, Songbird, Coston1, or Coston2, understanding token addresses (HLN, APS, WFLR, FXRP, CDP, eUSDT, etc.), or building anything DeFi-related on the Flare Network. Trigger on any mention of Enosys, Flare DEX, DEX V3, CLMM, CDP token, Loans protocol, APYCloud, HLN, APS, FTSO oracle integration, or Flare DeFi development.

Deep reference skill for Enosys DEX V3 (CLMM) development on Flare Network. Use this skill whenever Darren asks about: building tools or apps that interact with Enosys DEX V3 positions (LP position manager, burn tool, reward checker), contract addresses for the Enosys V3 position manager or reward system on Flare, how delegation rewards / FlareDrops / APS incentives / rFLR work and how to claim them on-chain, writing ethers.js v6 code against the Enosys V3 contracts, or any task referencing the dex-v3-main codebase. Trigger on any mention of: Enosys V3, CLMM, LP position manager, NonfungiblePositionManager, RewardManager, FtsoRewardRedistributor, MonthlyRewardManager, APS incentives, delegation rewards, FlareDrops, rFLR, burn NFT position, tokensOwed, or pool registry on Flare.

Concrete deployment registry for the Flare-family chains (Flare, Songbird, Coston2, Coston). Use when you need: a chain ID, an RPC URL, a block explorer URL, a token address (WFLR, USDT0, sFLR, FXRP, USDC, etc.), or the address of an ecosystem contract (Permit2, Multicall3, Enosys V3 / SparkDEX V3.1 / SparkDEX V4 / BlazeSwap / OpenOcean factories/routers/quoters/position-managers). Trigger on any mention of: "what's the address of X on Flare", "RPC for Songbird", "explorer API for Coston2", "is Permit2 deployed on Songbird", "WFLR address", "Multicall3 on Flare", "verify contract on flarescan", or any chain-info / address-lookup question. Pair with `flare-general` for protocol/architecture descriptions; this skill is the addresses- and-endpoints registry.

Provides domain knowledge and guidance for the Flare Data Connector (FDC)—attestation types, request flow, Merkle proofs, verifier/DA Layer, and smart contract integration. Use when working with FDC, cross-chain attestations, EVMTransaction, Web2Json, Payment, AddressValidity, XRPPayment, XRPPaymentNonexistence, proof-of-reserves, weather insurance, or Flare Developer Hub FDC guides and starter repos.

Provides domain knowledge and guidance for the Flare Time Series Oracle (FTSO)—block-latency feeds, Scaling anchor feeds, feed IDs, onchain and offchain consumption, fee calculation, delegation, and smart contract integration. Use when working with FTSO, price feeds, oracle data, feed consumption, volatility incentives, or Flare Developer Hub FTSO guides and starter repos.

Provides general domain knowledge about the Flare network—what it is, its core protocols (FTSO, FDC, FAssets, Smart Accounts, FCC/TEE), networks (Mainnet, Coston2, Songbird, Coston), RPC endpoints, block explorers, faucets, chain IDs, native tokens, consensus, and developer tooling. Use when answering general Flare questions, helping developers get started, or when no more specific Flare skill applies.

Provides domain knowledge and guidance for Flare Smart Accounts—account abstraction that allows XRPL users to interact with Flare without owning FLR. Use when working with smart accounts, XRPL-to-Flare transactions, MasterAccountController, custom instructions, Firelight/Upshift vault interactions, or the smart-accounts CLI.

Create production grade smart contracts. Use this skill when the user asks to write smart contracts, specially if they are going to be deployed to production (to a mainnet, or used in a mainnet script).