Web3 security skills for Claude Code and Codex — smart contract auditing, blockchain client auditing, and on-chain exploit investigation.
| Skill | Invoke | Description |
|---|---|---|
| contract-auditor | /contract-auditor [path] [deep] |
Solidity security auditor — DFS-based context mapping, parallel hunt agents, optional adversarial falsifier |
| client-auditor | /client-auditor <start|verify|report> [path] |
Blockchain node auditor (Go, Rust, C/C++) — 20 vulnerability pattern families across P2P, consensus, RPC, and memory safety; three explicit phases with disk-anchored audit state |
| exploit-investigator | /exploit-investigator 0x<tx> <chain> |
On-chain exploit investigator — traces attack transactions, reconstructs exploit logic, Analyst-Validator debate loop, optional Foundry PoC |
/contract-auditor # scan production Solidity sources
/contract-auditor deep # adds adversarial falsifier pass
/contract-auditor src/Vault.sol # review specific file(s)Three explicit phases — do not silently chain. Each phase stops after its own completion gate.
/client-auditor start [path] # recon + hunt drafts + inventory; stops after findings/ is populated
/client-auditor verify [path] # verify Medium+ findings in place (frontmatter + ## Verification body)
/client-auditor verify [path] deep # also run 4 depth lenses + adversarial review
/client-auditor report [path] # render report.md from existing findings; no validation/exploit-investigator <tx_hash> <chain> # investigate a transaction
/exploit-investigator <tx_hash> eth "suspected oracle manipulation" # with hints
/exploit-investigator briefs/incident.md # from a pre-written brief
/exploit-investigator poc 0x<tx_hash> # generate Foundry PoCClaude Code|Codex :
Install skills in https://github.com/DarkNavySecurity/web3-skills/
Or update an existing install:
Update skills in https://github.com/DarkNavySecurity/web3-skills/
Note: exploit-investigator requires additional setup (Python environment, API keys). See its README.
Smart Contract Auditing — $21K earned on Immunefi
Blockchain Client Auditing
- ~$800 earned on the Firedancer Immunefi Competition
- $1K earned on Immunefi (1 Medium finding)
- Independently discovered a vulnerability in rippled (XRP Ledger), officially acknowledged and patched
Onchain Exploit Analysis — 60+ artifacts in web3-exploit-analysis, also posted on
