Web3 Bug Bounty Hunting Ai Skills
Description
18 Claude Code skill files for smart contract security — built from 2,749 Immunefi reports, 681 DeFiHack reproductions, and real hunt experience
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
web3-bug-bounty-hunting-ai-skills
Smart contract bug bounty skills for Claude Code, Claude AI, and other AI tools. Built from 2,749 Immunefi reports, 681 DeFiHack reproductions, and real hunts.
[](./LICENSE) []() []() []()
Most hunters still do everything manually. Read contracts in a browser, grep from memory, rewrite Foundry templates each hunt, draft reports from scratch.
These skill files load into Claude Code (or any AI) and give it a complete smart contract security knowledge base — target scoring, bug patterns, grep arsenal, PoC templates, report format, and real case studies. One `claude` command, then start hunting.
Works with: **Claude Code**, **Claude.ai**, **Cursor**, **any AI that reads files**.
Files
| File | Contents |
|---|---|
| `00-start-here.md` | Index + how to navigate |
| `01-foundation.md` | Hunter mindset, target scoring (10-point scorecard), recon setup |
| `02-bug-classes.md` | All 10 bug classes — patterns, Solidity examples, real Immunefi findings |
| `03-grep-arsenal.md` | Grep/regex patterns for every bug class |
| `04-poc-and-foundry.md` | 18 Foundry PoC templates — fill in address, run forge test |
| `05-triage-report-examples.md` | 7-question validation gate, Immunefi report format, 20 paid examples |
| `06-methodology-research.md` | Trail of Bits, SlowMist, ConsenSys, Cyfrin, Nethermind methodology |
| `07-case-study-role-misconfiguration.md` | Full hunt walkthrough — role mis |
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Defense in Depth
Implement multi-layered testing and security best practices.
SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Google Workspace Model Armor
Filter user-generated content for safety
