Web3 Audit — Security skill for Claude Code
Smart contract security audit — runs through 10 bug class checklist (accounting desync, access control, incomplete path, off-by-one, oracle errors, ERC4626, reentrancy, flash loan, signature replay, p.
How to install Web3 Audit
Installs to ~/.claude/skills/mikacr1138-claude-bug-bounty-web3-audit/SKILL.md
mkdir -p ~/.claude/skills/mikacr1138-claude-bug-bounty-web3-audit && curl -fsSL https://raw.githubusercontent.com/Mikacr1138/claude-bug-bounty/HEAD/commands/web3-audit.md -o ~/.claude/skills/mikacr1138-claude-bug-bounty-web3-audit/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Web3 Audit does
Smart contract security audit — runs through 10 bug class checklist (accounting desync, access control, incomplete path, off-by-one, oracle errors, ERC4626, reentrancy, flash loan, signature replay, p.
Alternatives in Security
- /web3 Audit — Smart contract security audit using the 10-bug-class methodology 927 ★
- ThinkWatch — Self-hosted AI API and MCP gateway for organizations: SSO and RBAC, per-user identity for MCP tool calls, PII 817 ★
- Bountyforge — All-round bug bounty skill for Claude Code parallelized agents for smart contract audits (EVM, Move, Solana, T 399 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Web3 Bug Bounty Hunting AI Skills
18 Claude Code skill files for smart contract security — built from 2,749 Immunefi reports, 681 DeFiHack repro
POC Or It Didnt Happen Web3
A Web3-only security thinking framework that supercharges any coding agent (Claude Code / Codex / opencode / D
Walkthrough Nt
Role-driven browser walkthrough — identify each user role, drive the running app through their journeys in a r
Token Waste Audit
Run the FR-26 token-waste audit — parse this project's Claude Code transcripts deterministically (requestId-de
Audit Request
Verify that a feature implementation satisfies the original request — reopen issues if incomplete or incorrect
Review Audit
Review recently closed audit issues for implementation quality — reopen with comments if work is incomplete or
Related Agents
Web3 Auditor
Smart contract security auditor. Checks 10 bug classes in order of frequency (accounting desync 28%, access co
Economic Analyst
Owns checklist 06 (economic & logic) and the economic known-vectors — flash loans, first-depositor, MEV, oracl
Economic Attack Simulator
Answers the question poc-writing cannot — is the attack profitable, and by how much? Builds an attacker profit
