Updated 3w ago
by awarexone
web3-bug-bounty-hunting-ai-skills
18 Claude Code skill files for smart contract security — built from 2,749 Immunefi reports, 681 DeFiHack reproductions, and real hunt experience
165 GitHub stars (165)
+7 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | +1 |
| Oct 2 | +2 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | +1 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | +1 |
| Oct 12 | +1 |
| Oct 13 | +1 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | 0 |
- 11 skills (11 skills found in its SKILL.md files)
- 42 forks (42 forks)
- 3w ago last update (Last updated 3w ago)
Install
Skills CLI
npx skills add awarexone/web3-bug-bounty-hunting-ai-skills
Asks which skills and agents to install. Just one: npx skills add awarexone/web3-bug-bounty-hunting-ai-skills --skill web3-ai-tools — add -g for every project.
Claude Code
git clone https://github.com/awarexone/web3-bug-bounty-hunting-ai-skillscp -r "web3-bug-bounty-hunting-ai-skills/web3-ai-tools" ~/.claude/skills/
Copies the web3-ai-tools skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add awarexone/web3-bug-bounty-hunting-ai-skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
web3-ai-tools
AI-powered tools for Web3 bug bounty automation. Use when you want to automate recon, run autonomous audits, or use AI agents for vulnerability discovery.
web3-ai-tools/SKILL.md on GitHub (opens in a new tab) -
web3-bug-classes
Complete reference for all 10 DeFi smart contract bug classes. Use this when hunting for specific vulnerability types, need attack patterns for accounting desync, access control, incomplete path, off-by-one, oracle manipulation, ERC4626 vaults, reentrancy, flash loans, signature replay, or proxy/upgrade bugs.
web3-bug-classes/SKILL.md on GitHub (opens in a new tab) -
web3-case-study-role-misconfig
Case study - role misconfiguration bug class applied to a yield aggregator protocol. Use as a template for applying all 10 bug classes to a single target.
web3-case-study-role-misconfig/SKILL.md on GitHub (opens in a new tab) -
web3-grep-arsenal
Master grep command arsenal for Web3 smart contract auditing. Use when starting a new protocol scan, before deep code review, or when hunting specific vulnerability classes.
web3-grep-arsenal/SKILL.md on GitHub (opens in a new tab) -
web3-hunt-foundation
Hunter mindset, recon setup, and target scoring for Web3 bug bounty. Use at the START of any new protocol hunt - scoring targets, setting up environment, understanding architecture.
web3-hunt-foundation/SKILL.md on GitHub (opens in a new tab) -
web3-hunt-zksync-era
ZKsync Era (Immunefi) completed hunt — 0 findings after exhaustive 5-session audit. Use as a DEFENSE STUDY — learn what makes a protocol unhuntable, which patterns block all 10 bug classes, and when to abandon a target. Contains architecture breakdown, 25 tested attack vectors, and pre-dive scoring refinements for large L1 bridge protocols.
web3-hunt-zksync-era/SKILL.md on GitHub (opens in a new tab) -
web3-methodology-research
External research synthesis from Trail of Bits, SlowMist, ConsenSys, Immunefi, and Cyfrin. Use this for advanced audit methodology, Echidna/Medusa fuzzing setup, Slither custom detector writing, attack pattern deep dives, or the 4-phase learning roadmap.
web3-methodology-research/SKILL.md on GitHub (opens in a new tab) -
web3-poc-foundry
Complete Foundry PoC writing guide + all cheatcodes + DeFiHackLabs reproduction patterns. Use this when building a proof of concept exploit, setting up a fork test, using Foundry cheatcodes, or reproducing a known DeFi hack for learning.
web3-poc-foundry/SKILL.md on GitHub (opens in a new tab) -
web3-solidity-audit-mcp
MCP server integrating Slither + Aderyn + SWC patterns into Claude Code for smart contract auditing. Use when analyzing Solidity files, running DeFi-specific detectors, or generating invariants. 10 MCP tools, 86 SWC detectors, DeFi preset pack, CI/CD workflow.
web3-solidity-audit-mcp/SKILL.md on GitHub (opens in a new tab) -
web3-start-here
Master index for the web3 smart contract security knowledge base. Use this to navigate the skill chain. Read files in order — each ends with NEXT.
web3-start-here/SKILL.md on GitHub (opens in a new tab) -
web3-triage-report
Bug triage validation system, Immunefi report format, and 20 real paid bounty examples dissected. Use this when validating a finding before submitting, writing an Immunefi report, checking if a bug is actually valid, or studying real examples of paid vulnerabilities.
web3-triage-report/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
ECCby affaan-m The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Cod…
-
reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries.
-
ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
-
ui-ux-pro-max-skillby nextlevelbuilder An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.
-
graphifyby Graphify-Labs Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Curs…
-
cavemanby JuliusBrussee 🪨 why use many token when few token do trick. Viral skill + proxy for coding agents that cuts 65% of tokens by talking like a caveman.