skills.rest
woohyun212
woohyun212COMMUNITY
Explore all skills by this author →
WebsiteGitHub

web3-smart-contract

Audit Solidity smart contracts for ten DeFi vulnerability classes using grep-pattern scans and Foundry PoC templates.

21|1|Updated Apr 12, 2026
Search Tags:#audit#solidity#ripgrep#foundry#defi#poc#smart-contracts
One-click install
npx skills add https://github.com/woohyun212/security-skill --skill web3-smart-contract
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: web3-smart-contract
Source: https://github.com/woohyun212/security-skill/tree/main/web3-smart-contract
Command: npx skills add https://github.com/woohyun212/security-skill --skill web3-smart-contract

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps auditors and security engineers find, confirm, and document high-impact vulnerabilities in Solidity smart contracts and DeFi protocols by combining automated grep-pattern scans with manual review and Foundry proof-of-concept tests.

Core Features & Use Cases

  • Ten bug-class coverage: Scans and guides investigation across Accounting desynchronization, Access Control, Incomplete Code Paths, Off-by-One, Oracle manipulation, ERC4626, Reentrancy, Flash loans, Signature replay, and Proxy/upgrade issues.
  • Audit workflow: Provides reproducible grep-pattern scan outputs, manual confirmation steps, Foundry PoC test templates, and a severity-rated findings report for CRITICAL/HIGH/MEDIUM/LOW/INFO.
  • Use case: Triage a bug bounty submission by running targeted grep scans, craft a Foundry PoC for confirmed critical findings, and generate a remediation-focused audit report.

Quick Start

Run the grep-pattern scans on the target Solidity source, confirm findings, and create Foundry PoC tests plus a severity-rated findings report.

Frequently Asked Questions about web3-smart-contract

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Solidity smart contracts for DeFi vulnerabilities?▼

You can audit Solidity smart contracts for DeFi vulnerabilities by running automated ripgrep pattern scans to detect ten bug classes, followed by manual confirmation and Foundry proof-of-concept tests. This generates a severity-rated findings report.

What DeFi vulnerability classes can I detect in smart contracts?▼

You can detect ten DeFi vulnerability classes in smart contracts, including accounting desynchronization, access control, reentrancy, oracle manipulation, flash loans, ERC4626, signature replay, proxy issues, off-by-one, and incomplete code paths.

How do I write a Foundry PoC for a smart contract vulnerability?▼

You can write a Foundry PoC for a smart contract vulnerability by using provided test templates after confirming grep scan findings. Foundry requires optional mainnet RPC access for forks to validate the exploit against the target protocol.

Do I need ripgrep and Foundry to scan for smart contract bugs?▼

Yes, you need ripgrep for scanning smart contract source code and Foundry for executing proof-of-concept tests. Read access to the Solidity contract source is required, while mainnet RPC is optional for fork testing.

Can I use grep patterns to triage Etherscan-verified contracts?▼

Yes, you can use grep patterns to triage Etherscan-verified contracts. The scanning workflow applies to Etherscan-verified source code, Hardhat projects, and bug bounty triage scenarios to identify high-impact vulnerabilities.

What's the best way to document smart contract audit findings?▼

The best way to document smart contract audit findings is by generating a severity-rated report categorized by CRITICAL, HIGH, MEDIUM, LOW, and INFO levels. This report integrates grep scan outputs, manual review steps, and Foundry PoC validation results.

Related Skills

Explore More Software Engineering Skills→
emilneuraz-aiemilneuraz-ai

web3-testing

Automates structured testing of Solidity contracts using Hardhat and Foundry.

Community
Advanced
Mikacr1138Mikacr1138
2

report-writing

Generate impact-first bug bounty reports with CVSS 3.1 scoring and pre-submit checklists.

Community
Advanced
0xHarbs0xHarbs
1

solidity-audit

Audit Solidity contracts for vulnerabilities using Slither, Aderyn, and 104 patterns.

Community
Advanced
mlvpatelmlvpatel
1

chain-guard

Catalog DeFi bug classes and pre-dive kill signals for Solidity and Rust audits.

Community
Advanced