Claude Skills by cyotee

Deep EVM smart contract security audit system. Use when asked to audit a contract, find vulnerabilities, review code for security issues, or file security issues on a GitHub repo. Covers 500+ non-obvious checklist items across 19 domains via parallel sub-agents. Different from the security skill (which teaches defensive coding) — this is for systematically auditing contracts you didn't write.

DeFi legos and protocol composability on Ethereum and L2s. Major protocols per chain — Aerodrome on Base, GMX/Pendle on Arbitrum, Velodrome on Optimism — plus mainnet primitives (Uniswap, Aave, Compound, Curve). How they work, how to build on them, and how to combine them. Use when building DeFi integrations, choosing protocols on a specific L2, designing yield strategies, or composing existing protocols into something new.

The essential mental models for building onchain — focused on what LLMs get wrong and what humans need explained. "Nothing is automatic" and "incentives are everything" are the core messages. Use when your human is new to onchain development, when they're designing a system, or when they ask "how does this actually work?" Also use when YOU are designing a system — the state machine + incentive framework catches design mistakes before they become dead code.

Use for every Ethereum dApp architecture plan and for reviews of existing systems, trust assumptions, custody, admin keys, pause or upgrade powers, hosted infra (RPC, indexer, paymaster, bundler, frontend host, oracle, sequencer), privacy, identity flows, agent permissions, stablecoin issuer risk, censorship resistance, user exit, and restrictive licenses (BUSL, SSPL). CROPS means Censorship Resistance, Open Source and Free, Privacy, Security.

Current Ethereum gas prices, transaction costs, and the real economics of building on Ethereum today. Use when estimating costs, choosing between mainnet and L2s, or when a user asks about Ethereum being expensive. Counters the #1 misconception that Ethereum is expensive to use.

How to read and query onchain data — events, The Graph, indexing patterns. Why you cannot just loop through blocks, and what to use instead.

Ethereum Layer 2 landscape — Arbitrum, Optimism, Base, zkSync, Scroll, Unichain, Celo, and more. How they work, how to deploy on them, how to bridge, when to use which. Includes per-chain DeFi ecosystems and critical corrections. Use when choosing an L2, deploying cross-chain, or when a user asks about Ethereum scaling.

How an AI agent plans, builds, and deploys a complete Ethereum dApp. The three-phase build system for Scaffold-ETH 2 projects. Use when building a full application on Ethereum — from contracts to frontend to production deployment on IPFS.

How Ethereum evolves — EIP lifecycle, fork process, where decisions happen, and how to track upcoming changes. Use when your human asks about upcoming features, when building for future protocol capabilities, or when they want to propose a change. Also use when YOU need to know if a feature exists yet or when it's coming.

Pre-ship audit checklist for Ethereum dApps built with Scaffold-ETH 2. Give this to a separate reviewer agent (or fresh context) AFTER the build is complete. Use this skill whenever you are finalizing a dApp built with Scaffold-ETH 2.

Solidity security patterns, common vulnerabilities, and pre-deploy audit checklist. The specific code patterns that prevent real losses — not just warnings, but defensive implementations. Use before deploying any contract, when reviewing code, or when building anything that holds or moves value.

End-to-end guide for AI agents — from a dApp idea to deployed production app. Fetch this FIRST, it routes you through all other skills.

Ethereum token and protocol standards — ERC-20, ERC-721, ERC-1155, ERC-4337, ERC-8004, and newer standards. When to use each, how they work, key interfaces. Use when building tokens, NFTs, or choosing the right standard for a project.

Smart contract testing with Foundry — unit tests, fuzz testing, fork testing, invariant testing. Use when writing tests for a smart contract.

Current Ethereum development tools, frameworks, libraries, RPCs, and block explorers. What actually works today for building on Ethereum. Includes tool discovery for AI agents — MCPs, abi.ninja, Foundry, Scaffold-ETH 2, Hardhat, and more. Use when setting up a dev environment, choosing tools, or when an agent needs to discover what's available.

How to create, manage, and use Ethereum wallets. Covers EOAs, smart contract wallets, multisig (Safe), and account abstraction. Use this skill whenever you are sending transactions, signing messages, or managing funds. Includes guardrails for safe key handling.

Property-based testing with Foundry's fuzzer. Use when writing fuzz tests, invariant tests, or testing edge cases. Covers fuzz test structure, input constraints, fixtures, and invariant testing patterns.

Foundry cheatcodes, assertions, and forge test CLI. Use for vm.prank, expectRevert, verbosity, and general Foundry mechanics. For Crane/IndexedEx protocol and Diamond tests, prefer crane-testing and production-first deploy paths over mocks.

This skill should be used when the user asks to "adversarial DETF tests", "MultiVaultWeightedDetf adversarial", "abuse tests for Standard Exchange", "vault donation attack IndexedEx", "claim redeem attack test", "DETF reentrancy test", "write adversarial suite for vault", or needs guidance implementing production-first adversarial Foundry tests for IndexedEx DETFs, Standard Exchange vaults, multi-vault products, bond/claim paths, or similar registry-deployed vaults.

Guides IndexedEx Foundry launch scripts: Phase/Stage file layout, two-shell Anvil vs public entrypoints, skip/pin/rehearsal, and Anvil configuration for accurate EIP-1559 gas and deployer funding quotes. Use when the user asks about "Phase_00_Stage", "anvil_robinhood", "4663", "46630", "simulate architecture", "gas estimate", "funding quote", "disable-code-size-limit", "disable-min-priority-fee", launch scripts, robinhood_testnet.sh, "platform.json", "tokenlist", or "chain/46630" export. DO N...

Project voice law for IndexedEx / DETF customer-facing copy (UI, research notes, marketing site, X posts). Use when writing or editing landing pages, product UI strings, Protocol DETF copy, research education, disclaimers, CTAs, or when copywriting/copy-editing skills would otherwise inject marketing jargon. Triggers: product voice, UI copy, landing copy, Protocol DETF wording, ban jargon, plain language DeFi, customer-facing text, rewrite marketing speak, DETF narrative.

This skill should be used when writing or reviewing IndexedEx Foundry tests, TestBases, mocks, vm.mockCall, IndexedexTest, vault DFPkg deploy, Standard Exchange tests, DETF tests, fork tests, or when an agent is tempted to mock vaults/manager/registry. Prefer production code over mocks.

Runs IndexedEx/DTF frontend transactions through the UI with Playwright injected wallets (not MetaMask) and verifies on-chain effects. Use when the user asks to "test UI txs", "e2e bond", "live swap UI", "Playwright staking", "verify deposit through UI", "DTF e2e", "Robinhood Anvil UI", "click through money path", or after frontend money-path changes. DO NOT use for Foundry contract tests (crane-testing / indexedex-testing) or pure copy/IA smoke without txs.

Guides implementation of IndexedEx Uniswap V4 Hook Diamond Packages (IUniswapV4HookDiamondPackage), package→Vault Registry→hook factory deploy, CREATE2 flag mining, salt without package address, HookFlags facet, immutable postDeploy diamonds, and production-first tests. Use when building or reviewing "V4 hook package", "UniswapV4HookDiamondPackage", "deployHookVault", "requiredHookFlags", "hook diamond factory", "mineNonce", Single SE Buffer CP Hook package, or any new hook DFPkg under contra...

This skill should be used when the user asks about "Morpho architecture", "Morpho Blue", "isolated markets", "MarketParams", "MetaMorpho", "Morpho Vault V2", "Bundler3", "AdaptiveCurveIRM", "how Morpho works", or needs a high-level map of the Morpho lending stack and how pieces connect.

This skill should be used when the user asks about "Morpho supply", "Morpho borrow", "supplyCollateral", "repay", "liquidate Morpho", "createMarket", "Morpho flash loan", "onBehalf Morpho", "position shares", or needs to implement or call Morpho Blue market operations as an end user or integrator.

This skill should be used when the user asks about "MetaMorpho", "Morpho vault deposit", "Morpho ERC4626", "reallocate Morpho", "Public Allocator", "Vault V2 Morpho", "Morpho curator", "supplyQueue", "Bundler3", "atomic Morpho multicall", or needs to use Morpho vaults as an end user or integrate curated vault products.

This skill should be used when the user asks about "Olympus architecture", "Olympus V3", "Bophades", "Default Framework", "Kernel module policy", "Keycode", "permissioned module", "how Olympus works", or needs a high-level map of Olympus Kernel / modules / policies and how pieces connect.

This skill should be used when the user asks about "Olympus mint", "mint OHM", "Olympus treasury withdraw", "RolesAdmin grantRole", "Cooler loan", "clear Cooler request", "use Olympus as user", "call Minter policy", "Emergency withdraw", or needs end-user / operator call flows against Olympus policies and Cooler.

Explains the pons token launch protocol on Robinhood Chain (chain ID 4663): v1 (Uniswap V3 locked pool from day one) vs v2 (bonding curve then Uniswap V4 graduation), network facts, contract roles, fees, graduation, and risk model. Use when the user asks about "pons", "ponsfamily", "pons v1", "pons v2", "Robinhood Chain launchpad", "how pons works", "pons graduation", "pons factory", or needs a system map before trading or integrating. DO NOT use for step-by-step trade/launch UX (skill:pons-o...

Integrates with the pons protocol onchain: Robinhood Chain RPC, v1 factory/locker addresses, TokenLaunched and Swap indexing, token self-describing reads, V3 pricing and graduationStatus, v2 curve buy/sell, launchToken, fee escrow, events, and Uniswap V4 pool keys. Use when the user asks to "index pons", "integrate pons", "pons TokenLaunched", "pons factory ABI", "trade pons via viem", "pons graduationStatus", "build a pons bot", "pons quoter", or "Robinhood Chain 4663 launchpad SDK". DO NOT ...

Guides end-user and creator workflows on pons (Robinhood Chain launchpad): browse launches, verify token address, buy/sell, create a launch, track graduation, claim creator fees, community takeovers (CTO), and risk checks. Covers v1 (live WETH/Uniswap V3 pools) and v2 (bonding curve → Uniswap V4). Use when the user asks to "trade on pons", "launch a token on pons", "claim pons creator fees", "pons CTO", "graduate on pons", "buy pons launch", "pons launchpad", or "how do I use pons". DO NOT us...

Reliable, composable browser automation using minimal OpenCode Browser primitives.

Internal logic and data flow philosophy (The 5 Laws of Elegant Defense). Understand deeply to ensure code guides data naturally and prevents errors.

Comprehensive code review methodology with severity classification and confidence thresholds

Visual & UI philosophy (The 5 Pillars of Intentional UI). Understand deeply to avoid "AI slop" and create distinctive, memorable interfaces.

Guidelines for creating and managing implementation plans with citations

Criteria for reviewing implementation plans against quality standards

Reliable, composable browser automation using minimal OpenCode Browser primitives.

This skill should be used when the user asks about "Aave V3 architecture", "Pool contract", "PoolAddressesProvider", "PoolConfigurator", "Aave lending", "Aave borrowing", or needs a high-level understanding of how Aave V3 works.

This skill should be used when the user asks about "ReserveConfiguration", "interest rate strategy", "DefaultReserveInterestRateStrategyV2", "reserve factor", "LTV", "liquidation threshold", "caps", "PoolConfigurator", or needs to understand Aave V3 reserve configuration.

This skill should be used when the user asks about "eMode", "efficiency mode", "correlated assets", "liquid eModes", "collateralBitmap", "borrowableBitmap", "EModeCategory", or needs to understand Aave V3 Efficiency Modes.

This skill should be used when the user asks about "flash loan", "flashLoan", "flashLoanSimple", "FlashLoanLogic", "IFlashLoanReceiver", "flash borrower", or needs to understand Aave V3 flash loan functionality.

This skill should be used when the user asks about "Aave supply", "Aave borrow", "Aave repay", "Aave withdraw", "Aave liquidation", "Pool.sol", "SupplyLogic", "BorrowLogic", "LiquidationLogic", or needs to understand core Aave V3 Pool operations.

This skill should be used when the user asks about "StataToken", "static aToken", "ERC4626", "ERC-4626", "StataTokenV2", "StataTokenFactory", "wrapped aToken", "yield-bearing vault", or needs to understand Aave V3's ERC4626 wrapper.

This skill should be used when the user asks about "aToken", "AToken.sol", "VariableDebtToken", "debt tokens", "scaled balance", "liquidity index", "ScaledBalanceTokenBase", or needs to understand Aave V3 token implementations.

This skill should be used when the user asks about "Aave V4 architecture", "hub-and-spoke", "Hub contract", "Spoke contract", "unified liquidity layer", or needs a high-level understanding of how Aave V4 works.

This skill should be used when the user asks about "dynamic configuration", "dynamic risk configuration", "configKey", "collateral factor", "config snapshot", "rebinding", or needs to understand Aave V4's dynamic risk parameter system.

This skill should be used when the user asks about "Hub contract", "Hub.sol", "liquidity hub", "add liquidity", "draw liquidity", "restore", "asset management", or needs to understand Aave V4 Hub operations.

This skill should be used when the user asks about "liquidation", "liquidationCall", "target health factor", "liquidation bonus", "Dutch auction", "close factor", or needs to understand Aave V4's redesigned liquidation engine.