菜单
Performs Web3 security analysis including vulnerability detection, rug pull checks, and exploit monitoring. Use before interacting with unknown contracts or when auditing smart contract code.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Manages Web3 wallets including HD derivation, ERC-4337 account abstraction, multi-sig (Safe), and social recovery. Use when creating wallets, signing transactions, managing keys, or configuring smart accounts.
Interacts with smart contracts via ABI encode/decode, read/write calls, deployment, proxy patterns, and multicall batching. Use when calling contract functions, deploying contracts, or working with upgradeable proxies.
Executes DeFi operations including token swaps, lending/borrowing, staking, liquidity provision, flash loans, perpetuals, and vault strategies. Use when interacting with Uniswap, Aave, Compound, Lido, or other DeFi protocols.
Manages NFTs including minting, trading, ERC-721/1155 operations, marketplace integration, and token-bound accounts (ERC-6551). Use when working with NFT collections, metadata, or TBA wallets.
Manages DAO governance including proposals, voting, delegation, treasury management, and timelocks. Use when interacting with Governor contracts, Snapshot, or DAO treasuries.
Handles cross-chain operations including token bridging, cross-chain messaging, and intent-based routing. Use when moving assets or data between blockchains.
| name | skill-08-security-audit |
| description | Performs Web3 security analysis including vulnerability detection, rug pull checks, and exploit monitoring. Use before interacting with unknown contracts or when auditing smart contract code. |
| metadata | {"phase":2,"chains":"ethereum,polygon,arbitrum,base,optimism,avalanche,bnb,solana"} |
blockchain-rpc-server, defi-protocol-serverknowledge-base/security/Run before any token swap or liquidity add:
| Check | Red Flag |
|---|---|
| Ownership | owner() can mint unlimited tokens |
| Liquidity | LP not locked or unlock imminent |
| Honeypot | Sell simulation reverts |
| Hidden fees | Transfer tax > 10% or modifiable |
| Proxy | Unverified implementation, no timelock |
| Blacklist | isBlacklisted or pause on transfers |
Use eth_call simulation: attempt buy → approve → sell in single trace.
Scan for OWASP Smart Contract Top 10:
onlyOwner on critical functionsSee knowledge-base/security/common-vulnerabilities/ for patterns.
selfdestruct or delegatecall to user inputRISK: LOW | MEDIUM | HIGH | CRITICAL
FINDINGS: [list with severity]
RECOMMENDATION: PROCEED | CAUTION | BLOCK
Block interaction when RISK = CRITICAL or honeypot detected.
knowledge-base/security/audit-patterns/knowledge-base/security/exploit-db/