How do I install the Web3 Start Here skill?

Run npx skillmds@latest add gabson0x/web3-start-here in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Web3 Start Here safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: docs only. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Web3 Start Here?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Web3 Start Here free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Web3 Start Here?

Gabson0x (@gabson0x) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Web3 Start Here by gabson0x — Agent Skill

Name: Web3 Start Here
Rating: 4.2 (5 reviews)
Author: Gabson0x

File contents

WEB3 SKILLS — MASTER INDEX

Built from: 2,749 Immunefi reports + 100+ paid writeups + DeFiHackLabs + ConsenSys + SlowMist + Trail of Bits.

See also: [[Web3 Audit]], [[Methodology]], [[Trust Map]], [[Web3 Bug Classes]], [[Web3 Hunt Foundation]]

THE CHAIN (read in this exact order)

00-START-HERE.md              ← YOU ARE HERE
01-foundation.md              ← Mindset, target selection, recon setup
02-bug-classes.md             ← All 10 bug classes with patterns + real examples
03-grep-arsenal.md            ← Master grep patterns for every class
04-poc-and-foundry.md         ← Foundry PoC writing, cheatcodes, 18 exploit templates
05-triage-report-examples.md  ← 7-Question Gate, report format, 20 real paid examples
06-methodology-research.md    ← ToB, SlowMist, ConsenSys, Immunefi, Cyfrin, Lido, Nethermind
07-live-hunt-ern.md           ← Completed hunt: Ern protocol (2 findings)
09-live-hunt-zksync.md        ← Completed hunt: ZKsync Era (0 findings — defense study)
08-ai-tools.md                ← Shannon, LuaN1ao, SmartGuard, CAI Framework, AI code hunting
36-solidity-audit-mcp.md      ← MCP server: Slither+Aderyn+SWC in Claude Code

HOW TO USE THIS

Read one file fully — every section
At the bottom: follow → NEXT
After file 05: you can hunt independently
Files 06-08: advanced tools + active work
File 36: MCP integration for live scanning

QUICK STATS

Metric	Number
Immunefi reports analyzed	2,749
Protocols covered	51
Critical reports	406
High reports	616
Total paid by Immunefi	$100M+
Avg critical payout	$50K–$2M
Nethermind reports analyzed	166
DeFiHackLabs hacks reproduced	681

THE ONE RULE

"Read ALL sibling functions. If vote() has a modifier, check poke(), reset(), harvest(). The missing modifier on the sibling IS the bug."

This single rule explains 19% of all Critical findings.

→ NEXT: 01-foundation.md

---name: web3-start-heredescription: Master index for the web3 smart contract security knowledge base. Use this to navigate the skill chain. Read files in order — each ends with NEXT.---# WEB3 SKILLS — MASTER INDEXBuilt from: 2,749 Immunefi reports + 100+ paid writeups + DeFiHackLabs + ConsenSys + SlowMist + Trail of Bits.See also: [[Web3 Audit]], [[Methodology]], [[Trust Map]], [[Web3 Bug Classes]], [[Web3 Hunt Foundation]]---## THE CHAIN (read in this exact order)```00-START-HERE.md ← YOU ARE HERE01-foundation.md ← Mindset, target selection, recon setup02-bug-classes.md ← All 10 bug classes with patterns + real examples03-grep-arsenal.md ← Master grep patterns for every class04-poc-and-foundry.md ← Foundry PoC writing, cheatcodes, 18 exploit templates05-triage-report-examples.md ← 7-Question Gate, report format, 20 real paid examples06-methodology-research.md ← ToB, SlowMist, ConsenSys, Immunefi, Cyfrin, Lido, Nethermind07-live-hunt-ern.md ← Completed hunt: Ern protocol (2 findings)09-live-hunt-zksync.md ← Completed hunt: ZKsync Era (0 findings — defense study)08-ai-tools.md ← Shannon, LuaN1ao, SmartGuard, CAI Framework, AI code hunting36-solidity-audit-mcp.md ← MCP server: Slither+Aderyn+SWC in Claude Code```---## HOW TO USE THIS1. Read one file fully — every section2. At the bottom: follow → NEXT3. **After file 05**: you can hunt independently4. **Files 06-08**: advanced tools + active work5. **File 36**: MCP integration for live scanning---## QUICK STATS| Metric | Number ||--------|--------|| Immunefi reports analyzed | 2,749 || Protocols covered | 51 || Critical reports | 406 || High reports | 616 || Total paid by Immunefi | $100M+ || Avg critical payout | $50K–$2M || Nethermind reports analyzed | 166 || DeFiHackLabs hacks reproduced | 681 |---## THE ONE RULE> "Read ALL sibling functions. If `vote()` has a modifier, check `poke()`, `reset()`, `harvest()`. The missing modifier on the sibling IS the bug."This single rule explains 19% of all Critical findings.---→ NEXT: [01-foundation.md](01-foundation.md)

Frequently asked questions

Web3 Start Here