Topic: web3-security
120 skills in this topic.
-
external-precondition-audit
Trigger Pattern Any CPI (Cross-Program Invocation) detected in program - Inject Into Breadth agents (merged via M5 hierarchy)
PlamenTSV/plamen 215
-
plamen
Launch Plamen Web3 security audit pipeline
PlamenTSV/plamen 215
-
migration-analysis
Trigger Pattern Program upgrades, account data layout changes, deprecated instructions, token migrations - Inject Into Breadth agents, depth-state-trace
PlamenTSV/plamen 215
-
instruction-introspection
Trigger Pattern INSTRUCTION_INTROSPECTION flag detected (load_instruction_at/Sysvar1nstructions) - Inject Into Breadth agents, depth agents
PlamenTSV/plamen 215
-
verification-protocol
Trigger Pattern Always (used by all verifier agents) - Inject Into security-verifier agents (Phase 5)
PlamenTSV/plamen 215
-
token-2022-extensions
Trigger Pattern TOKEN_2022 flag detected (token_2022/spl_token_2022/transfer_checked usage) - Inject Into Breadth agents, depth agents
PlamenTSV/plamen 215
-
audit-prep
Prepare Solidity projects for a security audit — test coverage, test quality, NatSpec docs, code hygiene, dependency health, best-practice enforcement, deployment readiness, and project documentation checks. Generates a scored Audit Readiness Report and optionally runs static analysis. Trigger on: "prepare for audit", "audit readiness", "pre-audit check", "audit prep", "NatSpec check", or any request to review a Solidity codebase before a security review.
PlamenTSV/plamen 215
-
share-allocation-fairness
Trigger Pattern SHARE_ALLOCATION flag detected in pattern scan - Inject Into Breadth agents, depth-edge-case
PlamenTSV/plamen 215
-
cross-chain-timing
Type Thought-template (instantiate before use) - Research basis Multi-block arbitrage windows, bridge latency exploitation
PlamenTSV/plamen 215
-
economic-design-audit
Trigger Pattern MONETARY_PARAMETER flag (required) - Inject Into Breadth agents (merged via M6 hierarchy)
PlamenTSV/plamen 215
-
fork-ancestry
Trigger Pattern Always (run during recon TASK 0, not breadth) - Inject Into Recon agent only (meta_buffer.md enrichment)
PlamenTSV/plamen 215
-
semi-trusted-roles
Trigger Pattern operator/keeper/crank require_auth checks, authority-gated functions - Inject Into Breadth agents, depth-state-trace
PlamenTSV/plamen 215
-
temporal-parameter-staleness
Trigger Pattern TEMPORAL flag (required) - Inject Into Breadth agents, depth-state-trace
PlamenTSV/plamen 215
-
share-allocation-fairness
Trigger SHARE_ALLOCATION flag detected in pattern scan - Used by Breadth agents, depth-edge-case
PlamenTSV/plamen 215
-
ability-analysis
Trigger Pattern Always (Sui Move) -- foundational security check - Inject Into Breadth agents, depth agents
PlamenTSV/plamen 215
-
ability-analysis
Trigger Pattern Always (Aptos Move) - foundational security check - Inject Into Breadth agents, depth agents
PlamenTSV/plamen 215
-
flash-loan-interaction
Trigger Pattern FLASH_LOAN flag (required) or BALANCE_DEPENDENT flag (optional complement) - Inject Into Breadth agents, depth-token-flow, depth-edge-case
PlamenTSV/plamen 215
-
fungible-asset-security
Trigger FA_STANDARD flag detected (protocol uses FungibleAsset standard) - Used by Breadth agents, depth-token-flow
PlamenTSV/plamen 215
-
fork-ancestry
Trigger Pattern Always (run during recon TASK 0, not breadth) - Inject Into Recon agent only (meta_buffer.md enrichment)
PlamenTSV/plamen 215
-
stableswap-compliance
Trigger STABLESWAP_FORK flag (fork-ancestry detects Curve/StableSwap parent via get_d/get_y/ramp_a/StableSwap patterns) - Agent Type general-purpose (standalone niche agent, 1 budget slot)
PlamenTSV/plamen 215
-
semi-trusted-roles
Type Thought-template (instantiate before use) - Research basis Insider threat modeling, keeper/bot abuse vectors
PlamenTSV/plamen 215
-
account-abstraction-security
Protocol Type Trigger account_abstraction (detected when ERC-4337 interfaces, EntryPoint, UserOperation, or Paymaster patterns found) - Inject Into Breadth agents, depth-external
PlamenTSV/plamen 215
-
callback-receiver-safety
Niche agent for callback receiver safety: access control on implemented callback handlers, permissionless state inflation via callbacks, and selective revert exploitation
PlamenTSV/plamen 215
-
cross-chain-timing
Trigger Pattern stellar_bridge|soroban_bridge|horizon|anchor_protocol|bridge|cross_chain|relay|wormhole|allbridge|debridge|axelar|LayerZero|sequence|emitter - Inject Into Breadth agents, depth-external
PlamenTSV/plamen 215