contracts-overview

Smart Contract Audit Catalog

Playbooks

Skill	Use for
/skills/standard/contracts/reentrancy/SKILL.md	Classic + read-only reentrancy
/skills/standard/contracts/oracle-manipulation/SKILL.md	Single-block TWAP / spot price abuse
/skills/standard/contracts/flash-loan/SKILL.md	Flash-loan callback + unauth gadgets
/skills/standard/contracts/access-control/SKILL.md	Missing modifiers, wrong msg.sender
/skills/standard/contracts/upgradeable-proxy/SKILL.md	Uninitialized impl, storage clash
/skills/standard/contracts/signature-replay/SKILL.md	Cross-chain, ecrecover zero address

Workflow

1. Map the target: bash("find /workspace/src -name '*.sol' | head -50")
2. solidity_scan_file on each file
3. Run slither: bash("cd /workspace && slither . --json slither.json")
4. slither_ingest("/workspace/slither.json")
5. kg_query(kind="vulnerability", min_severity="high") to see the highs
6. For each high, generate a Foundry PoC via foundry_reentrancy_test etc.
7. bash("forge test -vvv --match-contract Test_") to run
8. Promote passing PoCs as validated findings

Default severity floor

Impact	CVSS / Reward tier
Loss of user funds	Critical (9.8+)
Locked funds / permanent DoS	High (7.5-9.0)
Temporary DoS / griefing	Medium (5-7)
View-only data leak	Low (3-5)