austintgriffith/evm-audit-skills
Developer toolsこのページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。 原文を見る
20 OpenClaw agent skills for deep EVM smart contract security audits. 500+ non-obvious checklist items across general, AMM, lending, staking, oracles, proxies, signatures, governance, bridges, and...
概要
A suite of 20 OpenClaw agent skills for deep EVM smart contract security audits. Built by clawdbotatg — an AI agent that builds on Ethereum autonomously. Each skill is a dense, sourced checklist of security vulnerabilities for a specific domain. These are the things that experienced auditors check that basic tools miss — precision loss patterns, AMM-specific attacks, oracle manipulation vectors, governance exploits, and more. Sources include: Dacian (dacian.me), beirao.xyz, SigmaPrime, Decurity, RareSkills, weird-erc20, Spearbit, Hacken, LayerZero, Cyfrin, OpenZeppelin, and the SWC registry. Or clone the whole suite and install locally: The agent will: 1. Load evm-audit-master → read the contract → select relevant skills 2. Spawn parallel opus sub-agents, one per skill domain 3. Each agent walks its checklist and writes findings 4. Synthesize into a final AUDIT-REPORT.md 5.
README
以下は原文 README の抜粋です。原文を見る。
evm-audit-skills
A suite of 20 OpenClaw agent skills for deep EVM smart contract security audits.
Built by clawdbotatg — an AI agent that builds on Ethereum autonomously.
What This Is
Each skill is a dense, sourced checklist of non-obvious security vulnerabilities for a specific domain. These are the things that experienced auditors check that basic tools miss — precision loss patterns, AMM-specific attacks, oracle manipulation vectors, governance exploits, and more.
~1,900 lines of checklist content. 500+ individual findings. 20 specialized domains.
Sources include: Dacian (dacian.me), beirao.xyz, SigmaPrime, Decurity, RareSkills, weird-erc20, Spearbit, Hacken, LayerZero, Cyfrin, OpenZeppelin, and the SWC registry.
Skills
| Skill | What It Covers |
|---|---|
evm-audit-master |
Start here. Routing table, methodology, standard finding format |
evm-audit-general |
Cross-cutting EVM footguns — applies to every contract |
evm-audit-precision-math |
Division ordering, rounding direction, downcast overflow, decimal mismatches |
evm-audit-erc20 |
Fee-on-transfer, rebasing, ERC777 hooks, approve races, weird tokens |
evm-audit-defi-amm |
Uniswap V3/V4, slippage attacks, CLM vulnerabilities, TWAP manipulation |
evm-audit-defi-lending |
Liquidation patterns, bad debt, collateral hiding, non-18 decimal failures |
evm-audit-defi-staking |
Liquid staking, restaking, EigenLayer, cooldown exploitation |
evm-audit-erc4626 |
Vault share math, inflation attack, rounding direction, 85+ patterns |
evm-audit-erc4337 |
Account abstraction, paymasters, session keys, bundler trust |
evm-audit-bridges |
LayerZero V2, CCIP, Wormhole, Across, message replay, finality |
evm-audit-proxies |
UUPS, Transparent, Beacon, Diamond, storage collisions, initializer bugs |
evm-audit-signatures |
Replay attacks, ecrecover, EIP-712, permit edge cases, malleability |
evm-audit-governance |
Flash loan voting, totalPower manipulation, proposal ordering, CREATE2 fake proposals |
evm-audit-oracles |
Chainlink staleness, minAnswer/maxAnswer, L2 sequencer, TWAP limits |
evm-audit-assembly |
Memory corruption, FMPA bugs, non-existent contract calls, uint128 overflow |
evm-audit-chain-specific |
Arbitrum, Optimism, zkSync, Blast, BSC — L2 quirks and opcode differences |
evm-audit-flashloans |
Flash loan attack patterns, oracle manipulation, governance exploits |
evm-audit-erc721 |
NFT callbacks, enumeration DoS, royalty bypass, wrapped collections |
evm-audit-dos |
Unbounded loops, return data bombs, force-send, griefing via revert |
evm-audit-access-control |
Centralization risks, 2-step ownership, role escalation, timelock bypass |
How To Use (OpenClaw)
Install a skill
openclaw skills install https://github.com/clawdbotatg/evm-audit-skills/raw/main/evm-audit-master/SKILL.md
推奨ツール
別のキーワードを試すか、フィルタを外してください。
インストール
npx skillfish add austintgriffith/evm-audit-skills