How do I install the Skill 08 Security Audit skill?

Run npx skillmds@latest add vaquarkhan/skill-08-security-audit in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Skill 08 Security Audit safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Skill 08 Security Audit?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Skill 08 Security Audit free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Skill 08 Security Audit?

vaquarkhan (@vaquarkhan) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Skill 08 Security Audit by vaquarkhan

Name: Skill 08 Security Audit
Author: vaquarkhan

File contents

Security Audit

When to Use

Evaluating unknown smart contracts before interaction
Detecting rug pull and honeypot patterns
Monitoring for active exploits and protocol incidents
Reviewing contract code for common vulnerabilities
Pre-deployment security checklist

Prerequisites

MCP: blockchain-rpc-server, defi-protocol-server
Knowledge base: knowledge-base/security/

Workflow

1. Automated Rug Pull Checks

Run before any token swap or liquidity add:

Check	Red Flag
Ownership	`owner()` can mint unlimited tokens
Liquidity	LP not locked or unlock imminent
Honeypot	Sell simulation reverts
Hidden fees	Transfer tax > 10% or modifiable
Proxy	Unverified implementation, no timelock
Blacklist	`isBlacklisted` or pause on transfers

Use eth_call simulation: attempt buy → approve → sell in single trace.

2. Vulnerability Patterns

Scan for OWASP Smart Contract Top 10:

Reentrancy — external calls before state updates
Access control — missing onlyOwner on critical functions
Oracle manipulation — spot price without TWAP
Flash loan attacks — single-block price dependency
Integer issues — unchecked math (pre-0.8.0)
Delegatecall — untrusted implementation in proxy
Front-running — no slippage/deadline protection

See knowledge-base/security/common-vulnerabilities/ for patterns.

3. Exploit Monitoring

Monitor Rekt News, DeFiLlama hacks dashboard
Check contract against known exploit DB
Verify protocol TVL hasn't dropped > 20% in 24h

4. Code Review Checklist

Uses Solidity ≥ 0.8.0 with overflow checks
External calls use checks-effects-interactions
No selfdestruct or delegatecall to user input
Timelock on admin functions (> 24h for DeFi)
Events emitted for state changes
Formal verification or audit report available

Verdict Format

RISK: LOW | MEDIUM | HIGH | CRITICAL
FINDINGS: [list with severity]
RECOMMENDATION: PROCEED | CAUTION | BLOCK

Block interaction when RISK = CRITICAL or honeypot detected.

References

knowledge-base/security/audit-patterns/
knowledge-base/security/exploit-db/

---name: skill-08-security-auditdescription: Performs Web3 security analysis including vulnerability detection, rug pull checks, and exploit monitoring. Use before interacting with unknown contracts or when auditing smart contract code.---# Security Audit## When to Use- Evaluating unknown smart contracts before interaction- Detecting rug pull and honeypot patterns- Monitoring for active exploits and protocol incidents- Reviewing contract code for common vulnerabilities- Pre-deployment security checklist## Prerequisites- MCP: `blockchain-rpc-server`, `defi-protocol-server`- Knowledge base: `knowledge-base/security/`## Workflow### 1. Automated Rug Pull ChecksRun before any token swap or liquidity add:| Check | Red Flag ||-------|----------|| Ownership | `owner()` can mint unlimited tokens || Liquidity | LP not locked or unlock imminent || Honeypot | Sell simulation reverts || Hidden fees | Transfer tax > 10% or modifiable || Proxy | Unverified implementation, no timelock || Blacklist | `isBlacklisted` or pause on transfers |Use `eth_call` simulation: attempt buy → approve → sell in single trace.### 2. Vulnerability PatternsScan for OWASP Smart Contract Top 10:1. **Reentrancy** — external calls before state updates2. **Access control** — missing `onlyOwner` on critical functions3. **Oracle manipulation** — spot price without TWAP4. **Flash loan attacks** — single-block price dependency5. **Integer issues** — unchecked math (pre-0.8.0)6. **Delegatecall** — untrusted implementation in proxy7. **Front-running** — no slippage/deadline protectionSee `knowledge-base/security/common-vulnerabilities/` for patterns.### 3. Exploit Monitoring- Monitor Rekt News, DeFiLlama hacks dashboard- Check contract against known exploit DB- Verify protocol TVL hasn't dropped > 20% in 24h### 4. Code Review Checklist- [ ] Uses Solidity ≥ 0.8.0 with overflow checks- [ ] External calls use checks-effects-interactions- [ ] No `selfdestruct` or `delegatecall` to user input- [ ] Timelock on admin functions (> 24h for DeFi)- [ ] Events emitted for state changes- [ ] Formal verification or audit report available## Verdict Format```RISK: LOW | MEDIUM | HIGH | CRITICALFINDINGS: [list with severity]RECOMMENDATION: PROCEED | CAUTION | BLOCK```Block interaction when RISK = CRITICAL or honeypot detected.## References- `knowledge-base/security/audit-patterns/`- `knowledge-base/security/exploit-db/`

Frequently asked questions

Skill 08 Security Audit