Blockchain

This skill helps developers test Solidity smart contracts using Hardhat and Foundry frameworks. It covers unit testing, integration testing, mainnet forking for realistic testing scenarios, gas optimization analysis, fuzzing for edge cases, and CI/CD pipeline integration for automated testing workflows.

This skill provides comprehensive guidance for implementing NFT standards in Solidity. It covers ERC-721 and ERC-1155 token contracts, metadata best practices (on-chain and IPFS), royalty implementation (EIP-2981), soulbound tokens, dynamic NFTs, and gas-optimized minting with ERC721A.

A comprehensive guide to smart contract security for Solidity developers. Covers critical vulnerabilities like reentrancy, integer overflow, and access control issues, along with secure coding patterns, gas optimization techniques, and testing strategies for blockchain applications.

This skill provides production-ready Solidity smart contract templates for building DeFi applications including staking platforms, automated market makers (AMMs), governance systems, flash loans, and NFT standards. It includes comprehensive security best practices, vulnerability prevention patterns, and testing strategies using Hardhat and Foundry.

Implement DeFi protocols with production-ready templates for staking, AMMs, governance, and lending systems. Use when building decentralized finance applications or smart contract protocols.

Guides blockchain auditors through verifying that smart contract code implements exactly what specification documents describe. Uses a 6-phase methodology with intermediate representations to systematically compare whitepapers and design docs against actual code implementation, identifying gaps, mismatches, and undocumented behavior.

Entry Point Analyzer is a security auditing skill for smart contracts. It systematically identifies all state-changing entry points (externally callable functions that modify state) in smart contract codebases across Solidity, Vyper, Solana, Move, TON, and CosmWasm. The skill classifies each entry point by access control level and generates structured audit reports to guide security analysis.

A security auditing skill for TON blockchain smart contracts written in FunC. It detects three critical vulnerability patterns: integer-as-boolean misuse (where positive integers used as booleans cause logic errors), fake Jetton contract attacks (missing sender validation on transfer notifications), and gas drainage vulnerabilities (unchecked forward TON amounts). The skill provides detailed detection patterns, mitigation code, and testing recommendations.

A comprehensive token integration security analyzer based on Trail of Bits' checklist. Guides users through systematic analysis of ERC20/ERC721 tokens for conformity issues, weird token patterns (fee-on-transfer, rebasing, missing returns, etc.), owner privileges, and integration safety concerns. Provides structured report templates and checklists.

This skill provides comprehensive security auditing guidelines for Substrate/FRAME blockchain runtime modules (pallets). It documents 7 critical vulnerability patterns including arithmetic overflow, panic DoS, incorrect weights, and origin validation issues, with detection patterns, mitigations, and testing recommendations.

A specialized security scanner for Solana blockchain programs that detects 6 critical vulnerability patterns including arbitrary cross-program invocations, improper PDA validation, and missing signer/ownership checks. It provides detailed vulnerability reports with code examples and mitigation strategies for both native Solana and Anchor framework programs.

This skill guides Solidity developers through Trail of Bits' 5-step secure development workflow. It helps run Slither security scans, check upgradeability and ERC conformance, generate visual security diagrams, document security properties for fuzzing/verification, and review manual security areas like front-running and DeFi risks.

A comprehensive smart contract development advisor based on Trail of Bits' best practices. It systematically analyzes blockchain codebases to review architecture, check upgradeability patterns, identify common security pitfalls, assess dependencies, and evaluate testing coverage, providing prioritized recommendations for improvement.

A comprehensive security auditing skill for Cairo/StarkNet smart contracts. It systematically scans for 6 critical vulnerability patterns including arithmetic overflow, L1-L2 messaging issues, signature replay attacks, and unchecked access control, providing detailed remediation guidance and integration with the Caracal static analyzer.

A security auditing skill for Algorand blockchain smart contracts. It guides users through scanning TEAL and PyTeal code for 11 critical vulnerability patterns including rekeying attacks, unchecked transaction fees, and access control issues, with detailed detection patterns and mitigation strategies.