Blockchain Security Auditor

Detect smart contract vulnerabilities and produce severity-classified audit findings with PoC scenarios.

110|18|Updated Mar 25, 2026
One-click install
npx skills add https://github.com/TravisLeeeeee/awesome-openclaw-personas --skill blockchain-security-auditor-travisleeeeee
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Blockchain Security Auditor
Source: https://github.com/TravisLeeeeee/awesome-openclaw-personas/tree/main/personas/security/blockchain-security-auditor
Command: npx skills add https://github.com/TravisLeeeeee/awesome-openclaw-personas --skill blockchain-security-auditor-travisleeeeee

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It solves the risk of DeFi and blockchain loss by systematically identifying exploitable smart-contract vulnerabilities and turning them into actionable, severity-ranked audit findings with proof and remediation.

Core Features & Use Cases

  • Vulnerability detection & PoC-ready findings: Covers reentrancy, access control flaws, integer issues, oracle manipulation, flash-loan attack surfaces, and MEV/front-running/griefing/DoS; requires each finding to include a concrete attack scenario or proof-of-concept with impact.
  • Structured audit workflow: Combines scope & recon, Slither/Mythril/Echidna-style automated checks, manual line-by-line review, and economic/game-theory analysis to validate real-world exploitability.
  • Professional audit report output: Produces report sections with severity classification (Critical/High/Medium/Low/Informational), impact, PoC, and specific remediation, plus templates for scope, findings, and appendices.
  • Access control and upgrade safety: Uses an explicit checklist for role hierarchy, initialization protection, upgrade controls, storage collision risks, and external-call safety.

Quick Start

Use the Blockchain Security Auditor skill to generate a complete smart contract security audit report for your protocol and include severity, impact, and a Foundry-style proof-of-concept for each issue.

Frequently Asked Questions about Blockchain Security Auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit smart contracts for DeFi vulnerabilities like reentrancy and oracle manipulation?▼

To audit smart contracts for DeFi vulnerabilities, you need a multi-stage workflow combining static analysis, manual review, and economic reasoning to validate exploitability. This detects reentrancy, oracle manipulation, and flash-loan attack surfaces.

What is the best way to generate a proof-of-concept for a smart contract exploit?▼

The best way to generate a proof-of-concept for a smart contract exploit is to validate the finding through game-theory analysis and produce a Foundry-style PoC. This demonstrates the concrete attack scenario and impact for severity classification.

Can I use Slither, Mythril, and Echidna for automated smart contract vulnerability detection?▼

Yes, you can use Slither, Mythril, and Echidna for automated smart contract vulnerability detection. These automated checks are combined with manual line-by-line review within a structured audit workflow to confirm real-world exploitability.

How do I check access control and upgrade safety in upgradeable-proxy smart contracts?▼

To check access control and upgrade safety in upgradeable-proxy smart contracts, apply an explicit checklist for role hierarchy, initialization protection, upgrade controls, and storage collision risks to ensure external-call safety.

Does smart contract auditing work for DEX, bridge, and governance protocol security?▼

Yes, smart contract auditing works for DEX, bridge, and governance protocol security. It applies economic incentive analysis and attacker-controlled execution path validation to identify exploitable vulnerabilities specific to composability and DeFi mechanisms.

How to write a professional audit report with severity classification for smart contract findings?▼

To write a professional audit report with severity classification for smart contract findings, structure sections into Critical, High, Medium, Low, and Informational. Include impact, proof-of-concept, and specific remediation for each discovered vulnerability.