AI Agent Skills

A guide to smart contract security best practices

Wscan is a web security scanner that focuses on web security, dedicated to making web security accessible to everyone.

Cadence: the resource-oriented smart contract programming language of the Flow network. Capability-based security, type safety, and move semantics

安全场景、基于AI的安全算法和安全数据分析业界实践

Ethereum smart contracts for security and utility tokens

The Certora Prover is the state-of-the-art security tool for automated formal verification of smart contracts running on EVM-based chains, Solana and Stellar

Postgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill BEFORE writing or changing anything that lives in a Postgres database: cre…

SQL static analyzer for performance, security, compliance and cost. 272 rules. Completely offline. Works in CI pipelines.

Golang library and framework selection — vetted production-ready options by category (web, database, testing, logging, messaging), new and experimental stdlib packages,…

reNgine-ng is an automated reconnaissance framework for web applications with a focus on highly configurable streamlined recon process via Engines, recon data correlatio…

Audits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource e

The first Claude skill for writing production-grade, security-first Solana programs. Anchor & Native Rust. Built by Frank Castle.

18 Claude Code skill files for smart contract security — built from 2,749 Immunefi reports, 681 DeFiHack reproductions, and real hunt experience

A lightweight active and passive scanner that combines the advantages of local and distributed models, supports dynamic external plugin import, and is dedicated to explo…

Pre-launch checklist for shipping a new website or web app. Scope: analytics (GA4, PostHog, Google Search Console, Ahrefs), DNS, TLS and backups, legal and CNIL/GDPR com…

Smart Contract Vulnerabilities (SCV) List