21 skills (repositories by tradecatlabs) · sorted by popularity
Provides a reference for reviewing DeFi smart contracts, programs that manage blockchain transactions. It organizes vulnerability types with causes, code examples, search patterns, and fixes to help investigate accounting, permissions, boundary conditions, and pricing logic.
Audit Solidity contracts in Foundry projects before deployment using code analysis, randomized tests, manual review, and private key checks. Produces a JSON report with findings, remediation, test coverage, and a pass or fail deployment decision.
Navigate a smart contract security knowledge base in a suggested reading order. Find guides covering audit preparation, vulnerability patterns, code searches, reproduction tests, reporting, case studies, and AI tools without losing track of the next topic.
Use grep text searches to locate Solidity code that needs security review. Ten search groups, priority tiers, and protocol-specific patterns help organize findings and choose where to begin a deeper smart contract audit.
Turn mathematical claims into definitions, lemmas, and proofs for Lean 4 and Mathlib. Check proofs with Lean’s trusted core, separately review whether the formal statement matches the original claim, and record verification evidence.
Check mathematical expressions, solve equations, and search bounded ranges for counterexamples using symbolic and numerical libraries. Record assumptions, commands, and results so calculations can be repeated, while keeping computational evidence distinct from general mathematical proof.
Uses a completed ZKsync Era investigation with no reportable findings as a defense study. It explains 25 tested attack vectors, the safeguards that blocked them, and criteria for deciding whether to continue reviewing a large bridge protocol.
Shape broad mathematical interests into precise research questions. Search prior work on definitions and theorems, record traceable sources, map supporting and conflicting evidence, and identify gaps that could lead to testable conjectures.
Assess Web3 vulnerability findings before submission by checking scope, reproducibility, prerequisites, and attack costs. Organize the root cause, measurable impact, working proof of concept, and proposed fix into an Immunefi report, with examples for comparison.
Examine a DeFi yield aggregator, a protocol that collects investment returns, for missing role assignments and failures caused by tiny rewards. Includes a ten-category review, reproducible test templates, and vulnerability report drafts.
Build runnable Foundry tests that demonstrate smart contract vulnerabilities with before-and-after logs and assertions. Use fork tests, which copy blockchain state, and test helpers to reproduce known DeFi incidents or prepare evidence for a report.
Prepare a Web3 bug bounty investigation by scoring targets, setting up analysis tools, reviewing past audits, and tracing how funds move. Use the findings to prioritize smart contracts and assess whether suspected issues have concrete impacts.
Clarify the next step in a mathematical research task by identifying what is blocking progress. Select one specialist skill for discovery, derivation, computation, proof, or formal verification, with required inputs and clear stopping conditions.
Turn scattered formulas and theory notes into a derivation that can be checked step by step. Keep definitions and assumptions consistent, distinguish exact identities from approximations, and make hidden conditions and limits explicit.
Analyze Solidity smart contracts with Slither and Mythril before Ethereum deployment. Combine code inspection with execution path analysis, review potential vulnerabilities, remove duplicate findings, and produce an audit report with severity ratings and suggested fixes.
Helps write and review mathematical proofs in natural language. It clarifies assumptions, maps dependencies between claims and lemmas, checks counterexamples and edge cases, and produces a traceable draft that identifies unresolved gaps or necessary changes to the statement.
Plan smart contract audits using research from security organizations. Combine threat modeling, static code analysis, fuzzing that varies test inputs, and manual review, while using attack patterns and a four-phase roadmap to guide further learning.
Connect Solidity security analyzers to Claude Code through MCP, a tool connection interface. Combine findings into a report sorted by severity, review contract changes, and generate tests for conditions that should always hold.
Choose and configure AI tools for Web3 security work across web applications, APIs, and Solidity contracts. Follow setup examples for reconnaissance, vulnerability validation, and proof-of-concept generation, then combine automated findings with manual review.
Build reusable Claude Skills from documentation, APIs, code, and specifications. Organize instructions and reference files, define clear activation conditions, add reproducible examples, and check new or existing skills against a delivery checklist.
Automate tmux, a tool for managing multiple terminal workspaces, to inspect output, send commands, monitor stalled tasks, and record logs. Coordinate multiple AI terminals with task queues, file locks, status tracking, and handoff reports.