# Contracts Overview

> Smart contract audit lane — Solidity/EVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.

- Skill: `purpleailab/contracts-overview` (Agent Skill)
- Install (CLI): `npx skillmds@latest add purpleailab/contracts-overview`
- Raw SKILL.md: https://api.skillmd.com/api/skills/purpleailab/contracts-overview/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: purpleailab (https://skillmd.com/u/purpleailab)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/purpleailab/contracts-overview

---


# Smart Contract Audit Catalog

## Playbooks
| Skill | Use for |
|---|---|
| `/skills/standard/contracts/reentrancy/SKILL.md`         | Classic + read-only reentrancy |
| `/skills/standard/contracts/oracle-manipulation/SKILL.md`| Single-block TWAP / spot price abuse |
| `/skills/standard/contracts/flash-loan/SKILL.md`         | Flash-loan callback + unauth gadgets |
| `/skills/standard/contracts/access-control/SKILL.md`     | Missing modifiers, wrong msg.sender |
| `/skills/standard/contracts/upgradeable-proxy/SKILL.md`  | Uninitialized impl, storage clash |
| `/skills/standard/contracts/signature-replay/SKILL.md`   | Cross-chain, ecrecover zero address |

## Workflow
1. Map the target: `bash("find /workspace/src -name '*.sol' | head -50")`
2. `solidity_scan_file` on each file
3. Run slither: `bash("cd /workspace && slither . --json slither.json")`
4. `slither_ingest("/workspace/slither.json")`
5. `kg_query(kind="vulnerability", min_severity="high")` to see the highs
6. For each high, generate a Foundry PoC via `foundry_reentrancy_test` etc.
7. `bash("forge test -vvv --match-contract Test_")` to run
8. Promote passing PoCs as validated findings

## Default severity floor
| Impact                         | CVSS / Reward tier |
|--------------------------------|--------------------|
| Loss of user funds             | Critical (9.8+)    |
| Locked funds / permanent DoS   | High (7.5-9.0)     |
| Temporary DoS / griefing       | Medium (5-7)       |
| View-only data leak            | Low (3-5)          |