Claude skills and agent skills

awarexoneReads credentialsSkill

web3-ai-tools

awarexone/web3-bug-bounty-hunting-ai-skills/web3-ai-tools/SKILL.md

AI-powered tools for Web3 bug bounty automation. Use when you want to automate recon, run autonomous audits, or use AI agents for vulnerability discovery.

awarexoneSkill

web3-bug-classes

awarexone/web3-bug-bounty-hunting-ai-skills/web3-bug-classes/SKILL.md

Complete reference for all 10 DeFi smart contract bug classes. Use this when hunting for specific vulnerability types, need attack patterns for accounting desync, access control, incomplete path, off-by-one, oracle manipulation, ERC4626 vaults, reentrancy, flash loans, signature replay, or proxy/upgrade bugs.

awarexoneSkill

web3-case-study-role-misconfig

awarexone/web3-bug-bounty-hunting-ai-skills/web3-case-study-role-misconfig/SKILL.md

Case study - role misconfiguration bug class applied to a yield aggregator protocol. Use as a template for applying all 10 bug classes to a single target.

awarexoneSkill

web3-grep-arsenal

awarexone/web3-bug-bounty-hunting-ai-skills/web3-grep-arsenal/SKILL.md

Master grep command arsenal for Web3 smart contract auditing. Use when starting a new protocol scan, before deep code review, or when hunting specific vulnerability classes.

awarexoneSkill

web3-hunt-foundation

awarexone/web3-bug-bounty-hunting-ai-skills/web3-hunt-foundation/SKILL.md

Hunter mindset, recon setup, and target scoring for Web3 bug bounty. Use at the START of any new protocol hunt - scoring targets, setting up environment, understanding architecture.

awarexoneSkill

web3-hunt-zksync-era

awarexone/web3-bug-bounty-hunting-ai-skills/web3-hunt-zksync-era/SKILL.md

ZKsync Era (Immunefi) completed hunt — 0 findings after exhaustive 5-session audit. Use as a DEFENSE STUDY — learn what makes a protocol unhuntable, which patterns block all 10 bug classes, and when to abandon a target. Contains architecture breakdown, 25 tested attack vectors, and pre-dive scoring refinements for large L1 bridge protocols.

awarexoneSkill

web3-methodology-research

awarexone/web3-bug-bounty-hunting-ai-skills/web3-methodology-research/SKILL.md

External research synthesis from Trail of Bits, SlowMist, ConsenSys, Immunefi, and Cyfrin. Use this for advanced audit methodology, Echidna/Medusa fuzzing setup, Slither custom detector writing, attack pattern deep dives, or the 4-phase learning roadmap.

awarexoneReads credentialsSkill

web3-poc-foundry

awarexone/web3-bug-bounty-hunting-ai-skills/web3-poc-foundry/SKILL.md

Complete Foundry PoC writing guide + all cheatcodes + DeFiHackLabs reproduction patterns. Use this when building a proof of concept exploit, setting up a fork test, using Foundry cheatcodes, or reproducing a known DeFi hack for learning.

awarexonePipes a download into a shellSkill

web3-solidity-audit-mcp

awarexone/web3-bug-bounty-hunting-ai-skills/web3-solidity-audit-mcp/SKILL.md

MCP server integrating Slither + Aderyn + SWC patterns into Claude Code for smart contract auditing. Use when analyzing Solidity files, running DeFi-specific detectors, or generating invariants. 10 MCP tools, 86 SWC detectors, DeFi preset pack, CI/CD workflow.

awarexoneSkill

web3-start-here

awarexone/web3-bug-bounty-hunting-ai-skills/web3-start-here/SKILL.md

Master index for the web3 smart contract security knowledge base. Use this to navigate the skill chain. Read files in order — each ends with NEXT.

awarexoneSkill

web3-triage-report

awarexone/web3-bug-bounty-hunting-ai-skills/web3-triage-report/SKILL.md

Bug triage validation system, Immunefi report format, and 20 real paid bounty examples dissected. Use this when validating a finding before submitting, writing an Immunefi report, checking if a bug is actually valid, or studying real examples of paid vulnerabilities.

awarexoneSkill

ai-agent-security

awarexone/AXguard/ai-agent-security/SKILL.md

Review AI agents with tools — shell, HTTP, files, browsers — for excessive agency, unsafe exec of model output, and missing human gates (CWE-78 / CWE-94).

awarexoneSkill

ai-application-security

awarexone/AXguard/ai-application-security/SKILL.md

Pre-ship security review for LLM-powered apps — RAG, chat APIs, output handling, and data exposure — without agent/tool focus.

awarexoneSkill

api-security

awarexone/AXguard/api-security/SKILL.md

Analyze REST/RPC/API security design — use for BOLA/BFLA, mass assignment, auth on endpoints, rate limits, inventory gaps, and unsafe outbound API consumption (OWASP API Top 10 2023).

Often used withattack-chain·llm-security·pentest-tools

awarexoneSkill

attack-surface-mapping

awarexone/AXguard/attack-surface-mapping/SKILL.md

Map application attack surface before deep scanning — use to inventory entry points, trust boundaries, data stores, and high-risk features that prioritize AXGuard skills and /axguard-audit.

awarexoneSkill

authentication-analysis

awarexone/AXguard/authentication-analysis/SKILL.md

Analyze authentication mechanisms — use when reviewing login, MFA, password storage, account recovery, API keys, or credential handling failures (CWE-287 / A07:2021 / API2:2023).

awarexoneSkill

authorization-analysis

awarexone/AXguard/authorization-analysis/SKILL.md

Analyze authorization and access control — use for IDOR/BOLA, missing ownership checks, privilege escalation, and function-level authZ gaps (CWE-639 / CWE-862 / CWE-863 / A01:2021 / API1:2023 / API5:2023).

awarexonePipes a download into a shellSkill

axguard-audit

awarexone/AXguard/axguard-audit/SKILL.md

Full A-Z pre-ship security audit. Run when the user asks to audit, scan for vulnerabilities, security review before publish, or generate an AXguard report. Covers secrets, auth/IDOR, SQL/SSTI/injection, path traversal, SSRF, XSS, uploads, GraphQL, crypto, CORS/cloud, supply chain, debug exposure, and AI-agent risks; writes Markdown and HTML reports.

awarexonePipes a download into a shellSkill

axguard-cso

awarexone/AXguard/axguard-cso/SKILL.md

Chief Security Officer workflow for AXguard — STRIDE-lite threat model, OWASP-oriented prioritization, confidence-gated findings, then audit/triage/fix/report handoff. Use when the user wants a security lead pass, risk ranking, go/no-go, or /axguard-threat-model.

awarexoneSkill

axguard-knowledge

awarexone/AXguard/axguard-knowledge/SKILL.md

Pre-ship vulnerability class encyclopedia for AXguard — root causes, static detection hints, CWE/OWASP maps, and fix guidance for IDOR, auth, XSS, SSRF, SQLi, SSTI, deserialization, path traversal, secrets, cloud, CORS, JWT, upload, GraphQL, supply chain, LLM/agent, debug exposure, and crypto misuse. Load when auditing, triaging, or remediating and a class needs depth. Defensive static review only.