All authors
Claude Skills by PlamenTSV
github.com/PlamenTSV160 skills0 installs215 views
- Ability AnalysisTrigger Pattern Always (Aptos Move) - foundational security check - Inject Into Breadth agents, depth agentsVotes: 0GitHub stars: 281
- Bit Shift SafetyTrigger Pattern Always (Aptos Move) - Move VM aborts on shift = bit width - Inject Into Breadth agents, depth-edge-caseVotes: 0GitHub stars: 281
- Centralization RiskTrigger Protocol has privileged roles (admin, operator, governance, resource account owner) - Covers Single points of failure, privilege escalation, external governance dependen...Votes: 0GitHub stars: 281
- Cross Chain TimingTrigger Pattern wormhole|layerzero|ccip|bridge|cross_chain|vaa|guardian|emitter|relay|remote_chain|payload|nonce.sequence - Inject Into Breadth agents, depth-externalVotes: 0GitHub stars: 281
- Dependency AuditTrigger EXTERNAL_LIB flag detected (protocol uses third-party Move dependencies) - Used by Breadth agents, depth-externalVotes: 0GitHub stars: 281
- Economic Design AuditTrigger Pattern MONETARY_PARAMETER flag (required) - Inject Into Breadth agents (merged via M4 hierarchy)Votes: 0GitHub stars: 281
- External Precondition AuditTrigger Pattern Any external module interaction detected in attack_surface.md - Inject Into Breadth agents (merged via M5 hierarchy)Votes: 0GitHub stars: 281
- Flash Loan InteractionTrigger Pattern FLASH_LOAN flag (required) or BALANCE_DEPENDENT flag (optional complement) - Inject Into Breadth agents, depth-token-flow, depth-edge-caseVotes: 0GitHub stars: 281
- Fork AncestryTrigger Pattern Always (run during recon TASK 0, not breadth) - Inject Into Recon agent only (meta_buffer.md enrichment)Votes: 0GitHub stars: 281
- Fungible Asset SecurityTrigger FA_STANDARD flag detected (protocol uses FungibleAsset standard) - Used by Breadth agents, depth-token-flowVotes: 0GitHub stars: 281
- Migration AnalysisTrigger Protocol has migration patterns (reinitialize, V2/V3, deprecated, upgrade, legacy, Coin-to-FA) - Covers Token type mismatches, stranded assets, interface incompatibiliti...Votes: 0GitHub stars: 281
- Move Safety Core DirectivesLightweight core directives for Aptos Move always-required skills — injected into every breadth agent. Full methodology lives in the dedicated Move-Safety Agent.Votes: 0GitHub stars: 281
- Oracle AnalysisTrigger Pattern ORACLE flag (required) - Inject Into Breadth agents, depth-external, depth-edge-caseVotes: 0GitHub stars: 281
- Reentrancy AnalysisTrigger REENTRANCY flag detected (dynamic dispatch, closures, dispatchable FA, function values) - Used by Breadth agents, depth-state-traceVotes: 0GitHub stars: 281
- Ref LifecycleType Thought-template (instantiate before use) - Trigger Pattern Always (Aptos Move) -- ConstructorRef/TransferRef/MintRef/BurnRef lifecycleVotes: 0GitHub stars: 281
- Semi Trusted RolesTrigger Pattern SEMI_TRUSTED_ROLE flag (required) - Inject Into Breadth agents, depth-state-traceVotes: 0GitHub stars: 281
- Share Allocation FairnessTrigger SHARE_ALLOCATION flag detected in pattern scan - Used by Breadth agents, depth-edge-caseVotes: 0GitHub stars: 281
- Temporal Parameter StalenessTrigger Pattern TEMPORAL flag (required) - Inject Into Breadth agents, depth-state-traceVotes: 0GitHub stars: 281
- Token Flow TracingTrigger Pattern BALANCE_DEPENDENT flag (required) - Inject Into Depth-token-flow, breadth agentsVotes: 0GitHub stars: 281
- Type SafetyTrigger Pattern Always (Aptos Move) - generic type exploitation - Inject Into Breadth agents, depth-state-traceVotes: 0GitHub stars: 281
- Verification ProtocolHow to prove a hypothesis is TRUE or FALSE using Move unit tests.Votes: 0GitHub stars: 281
- Zero State ReturnTrigger Pattern Vault/pool/first-depositor pattern detected - Inject Into Depth-edge-caseVotes: 0GitHub stars: 281
- Cross Chain Message IntegrityType Thought-template (instantiate before use) - Trigger Pattern CROSS_CHAIN_MSG flag detected (protocol RECEIVES cross-chain messages)Votes: 0GitHub stars: 281
- Event CorrectnessTrigger 15 events detected in recon event_definitions.md (optional skill) - Used By breadth agents (assigned to core state or dedicated agent)Votes: 0GitHub stars: 281
- Staking Receipt TokensType Thought-template (instantiate before use) - Research basis Donation attacks via unsolicited token transfersVotes: 0GitHub stars: 281
- Storage Layout SafetyType Thought-template (instantiate before use) - Trigger Pattern STORAGE_LAYOUT flag detectedVotes: 0GitHub stars: 281
- Account Abstraction SecurityProtocol Type Trigger account_abstraction (detected when ERC-4337 interfaces, EntryPoint, UserOperation, or Paymaster patterns found) - Inject Into Breadth agents, depth-externalVotes: 0GitHub stars: 281
- Dex Integration SecurityProtocol Type Trigger dex_integration (detected when recon finds swap|addLiquidity|removeLiquidity|IUniswapV2Router|ISwapRouter|amountOutMin|amountOutMinimum|slippage - AND the...Votes: 0GitHub stars: 281
- Governance Attack VectorsProtocol Type Trigger governance (detected when Governor, Timelock, voting, proposal, quorum, delegate patterns found) - Inject Into Breadth agents, depth-external, depth-edge-caseVotes: 0GitHub stars: 281
- Integration Hazard ResearchProtocol Type Trigger NAMED_EXTERNAL_PROTOCOL (detected when recon finds import/interface for an identifiable external protocol — not standard libraries). Researches known integration hazards of the target protocol.Votes: 0GitHub stars: 281
- Bls Aggregation AuditL1 trigger - audits BLS signature aggregation: subgroup check, rogue-key attack defense, aggregation order, signing-domain separation.Votes: 0GitHub stars: 281
- Config CorrectnessL1 trigger - audits configuration constants, documented bounds, feature-gated values, and unused protocol limits for semantic drift.Votes: 0GitHub stars: 281
- Consensus Math CorrectnessL1 trigger - audits consensus arithmetic for truncation, unused bounds, EMA direction, and threshold edge errors.Votes: 0GitHub stars: 281
- Consensus Safety InvariantsL1 trigger - detects non-determinism, state transition completeness violations, and safety/liveness invariant breaks in consensus code. Inject into depth-consensus-invariant or depth-state-trace.Votes: 0GitHub stars: 281
- Consensus Tx Identity InvariantsL1 trigger - audits replay protection, transaction identity binding, and cross-layer uniqueness.Votes: 0GitHub stars: 281
- Cross Environment Semantic DriftL1 trigger - audits L1/L2 boundary bugs, precompile context assumptions, integer width mismatches at environment boundaries, and EVM-on-non-EVM drift.Votes: 0GitHub stars: 281
- Data Availability EnforcementL1 supplement - audits storage / data-availability chains (Arweave, Filecoin, Irys, Crust, Celestia, EigenDA) for unenforced data commitments: producer commits to data inclusion but the validator never verifies the data was actually published / gossiped / sampled.Votes: 0GitHub stars: 281
- Dependency Audit NodeclientL1 supplement - audits Go modules and Rust crates for known vulnerabilities, outdated versions, supply chain risks, and replace/patch directives.Votes: 0GitHub stars: 281
- Execution Client HardeningL1 trigger - audits execution engine (EVM interpreter, WASM, SVM) for memory corruption, gas mispricing (EXTCODESIZE class), opcode semantics, and VM invariant breaks.Votes: 0GitHub stars: 281
- Fork Choice AuditL1 trigger - audits fork-choice rule implementation (LMD-GHOST, Tendermint locking, Nakamoto longest-chain) for equivocation handling, slot-vs-block reasoning, duplicate block handling, and chain reorg correctness.Votes: 0GitHub stars: 281
- Go Concurrency SafetyL1 supplement - audits Go-specific concurrency hazards in node client code: map iteration non-determinism, goroutine leaks, mutex ordering, panic boundaries, context cancellation.Votes: 0GitHub stars: 281
- Gossip Cache InvarianceL1 trigger - audits message and seen caches for write-after-validate ordering, eviction safety, and duplicate handling.Votes: 0GitHub stars: 281
- Hardfork Activation And Protocol UpgradeL1 trigger - audits bugs that surface only at fork boundaries / protocol upgrade points: activation logic, dormant code paths, upgrade epoch correctness, version gating.Votes: 0GitHub stars: 281
- Light Client Proof VerificationL1 trigger - audits light client and cross-chain proof verification: Merkle proof soundness, ICS-23 subkey handling (Dragonberry class), state root checks, message integrity.Votes: 0GitHub stars: 281
- Mempool Asymmetric DosL1 trigger - audits mempool / transaction pool for eviction asymmetries, replacement policy abuse, blob-pool exhaustion, and DETER-class denial of service.Votes: 0GitHub stars: 281
- P2p Dos And EclipseL1 trigger - audits peer-to-peer networking for DoS vectors (resource exhaustion, amplification), eclipse attack susceptibility, and discovery table poisoning (Kademlia/devp2p).Votes: 0GitHub stars: 281
- Peer Scoring CorrectnessL1 trigger - audits peer reputation and scoring logic for symmetry, farming resistance, and penalty coverage.Votes: 0GitHub stars: 281
- Rpc Surface AuditL1 trigger - audits JSON-RPC and Engine API surfaces for authentication bypass, rate limiting, subscription buffer overflows, and method-specific DoS.Votes: 0GitHub stars: 281
- Rust Unsafe AuditL1 supplement - audits Rust-specific hazards: unsafe blocks, uninitialized memory, Send/Sync violations, panic safety in hot paths, drop order, FFI.Votes: 0GitHub stars: 281
- State Sync PruningL1 trigger - audits state sync, snapshot integrity, checkpoint trust, pruning race conditions, and state growth attacks.Votes: 0GitHub stars: 281