Skill Claude CodeCodex
Persistent memory for the current session. Use this skill whenever the user asks you to remember a fact, recall something they told you before, or when starting work where prior context might exist (conventions, decisions, file purposes, preferences).
Plugin Claude Code
Smart contract security auditor for Claude Code — vuln detection, exploit PoCs, mainnet-fork sims, shareable audit cards, on-chain audit certificates.
Plugin Claude Code
Smart contract security auditor for Claude Code. Rugproof your code before someone else does.
Agent
Account-Abstraction (ERC-4337) specialist. EntryPoint, Bundler, Paymaster, smart-wallet (SimpleAccount, Safe-AA, Kernel, Biconomy), session keys, EIP-7702 transitions. Use when target involves UserOperation, validateUserOp, paymaster validation, or AA wallet logic.
Agent
AMM-specific audit specialist. Uniswap V2/V3/V4, Curve, Balancer, Berachain BEX, custom AMMs. Use when the target is an AMM, pool, router, or AMM fork. V4 hooks get special attention.
Agent
Specialist for inline assembly / Yul. Reviews memory layout, return-data handling, dirty-bits, opcode usage. Use whenever significant assembly is present.
Agent
Adversarial reviewer. Reads contract code with one goal — find a way to steal, brick, or grief. Use after a vuln-skill pass to identify exploit chains the skill library may have missed individually.
Agent
Bridge-specific specialist. Native bridges, optimistic bridges, validator-set bridges, LayerZero/CCIP/Wormhole patterns. Use whenever cross-chain message-passing is involved.
Agent
Specialist for cross-chain messaging primitives — LayerZero V2, Chainlink CCIP, Hyperlane, Wormhole, Axelar, Polyhedra ZKBridge, native rollup messengers. Distinct from bridge-specialist (which focuses on asset bridges); this focuses on the underlying message passing layer.
Agent
Blue team. Identifies missing defenses, weak invariants, and remediation gaps. Use alongside attacker for balanced review.
Agent
Rug-pull, tokenomics, and centralization deep-dive. Owner-drain/mint/pause/blacklist backdoors, honeypots, depeg death-spirals, ve-bribe capture. Emits a 0-100 rugability score. Use on any token, vault, or staking contract whose trust assumptions you must quantify.
Agent
Writes Foundry test files that prove an exploit. The test MUST compile and pass. Use from /exploit, /exploit-chain, /exploit-live.
Agent
Finds gas-saving opportunities with concrete patches and estimated savings. Use from /gas.
Agent
Governance specialist. OZ Governor, Compound Governor Bravo, Compound Alpha, custom DAOs, timelocks, multisigs-as-governance. Use when target involves voting, proposing, executing.
Agent
Intent-based protocol specialist — ERC-7683 (cross-chain intents), CoW Protocol, UniswapX, Across, 1inch Fusion. Use when target involves intents, solvers, settlers, or any "user signs intent → solver fills" pattern.
Agent
Identifies protocol invariants from contract code and intent, generates Foundry invariant tests with handlers. Use from /invariant and /audit-deep.
Agent
L2/rollup-risk specialist. Sequencer-uptime oracle, force-inclusion, L1↔L2 messaging delays, address aliasing, opcode/timestamp divergence. Use when the target deploys to Arbitrum, OP-stack, zkSync, Scroll, or Linea.
Agent
Lending-protocol specialist. Aave V3, Compound V3, Morpho, Silo, Euler, custom lending. Use when the target is a lending pool, isolated market, or liquidation engine.
Agent
NFT specialist — ERC-721, ERC-1155, royalties (ERC-2981, EIP-7585), metadata mutability, mint mechanics, marketplaces. Use when target is an NFT contract or NFT-adjacent.
Agent
Writes patches that fix specific findings. Validates via forge build + test. Use from /remediate.
Agent
Writes the final audit report (Markdown + HTML + JSON) from raw findings. Used by /report. Produces polished prose without consuming main context.
Agent
Restaking and AVS specialist — EigenLayer, Symbiotic, Karak, Babylon, AVS implementations, operator slashing. Use when target involves restaking deposits, operator delegation, AVS registration, or slashing.
Agent
Staking-protocol specialist. Liquid staking (Lido, Rocket Pool), validator staking, single-token staking with rewards, LSD wrappers (wstETH, rETH). Use when target is a staking contract.
Agent
Vyper-language specialist. Compiler-version bugs, decorator semantics, rawcall/createfromblueprint, no-inheritance auth. Use when any contract is written in Vyper (.vy) — especially Curve-ecosystem pools.