[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M77047MPNFQD7ACE3F402B6K":3,"skill-same:01M77047MPNFQD7ACE3F402B6K":51},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":19,"linkOnly":20,"markdownContent":21,"markdownBody":22,"frontMatter":23,"refName":31,"commitSha":32,"skillDirectory":33,"forksCount":14,"repositoryHtmlUrl":34,"repositoryHomepageUrl":6,"ownerHtmlUrl":35,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":36,"install":37,"resources":50},"01M77047MPNFQD7ACE3F402B6K","contracts-overview",null,"Smart contract audit lane — Solidity\u002FEVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.","Iwakishirokoshu\u002FHermesUltimate","Iwakishirokoshu","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F194847626?v=4","01M75P4CVGA89TTCE8JGMNAQQ9","Around","01M75P4CWF85V6GVSEFKGGFZ03",0,"MIT","https:\u002F\u002Fgithub.com\u002FIwakishirokoshu\u002FHermesUltimate\u002Fblob\u002Fmain\u002Fstack\u002Fdecepticon-slim\u002Fupstream\u002Fpackages\u002Fdecepticon\u002Fdecepticon\u002Fskills\u002Fstandard\u002Fcontracts\u002FSKILL.md",[],[],"2026-11-12 13:55:43",false,"---\nname: contracts-overview\ndescription: Smart contract audit lane — Solidity\u002FEVM pattern scanner, Slither ingestion, Foundry PoC generation, DeFi attack playbooks.\nmetadata:\n  subdomain: smart-contracts\n  when_to_use: \"smart contract solidity evm slither foundry defi audit lane overview routing\"\n  mitre_attack:\n    - T1190\n    - T1565\n    - T1565.001\n---\n\n# Smart Contract Audit Catalog\n\n## Playbooks\n| Skill | Use for |\n|---|---|\n| `\u002Fskills\u002Fstandard\u002Fcontracts\u002Freentrancy\u002FSKILL.md`         | Classic + read-only reentrancy |\n| `\u002Fskills\u002Fstandard\u002Fcontracts\u002Foracle-manipulation\u002FSKILL.md`| Single-block TWAP \u002F spot price abuse |\n| `\u002Fskills\u002Fstandard\u002Fcontracts\u002Fflash-loan\u002FSKILL.md`         | Flash-loan callback + unauth gadgets |\n| `\u002Fskills\u002Fstandard\u002Fcontracts\u002Faccess-control\u002FSKILL.md`     | Missing modifiers, wrong msg.sender |\n| `\u002Fskills\u002Fstandard\u002Fcontracts\u002Fupgradeable-proxy\u002FSKILL.md`  | Uninitialized impl, storage clash |\n| `\u002Fskills\u002Fstandard\u002Fcontracts\u002Fsignature-replay\u002FSKILL.md`   | Cross-chain, ecrecover zero address |\n\n## Workflow\n1. Map the target: `bash(\"find \u002Fworkspace\u002Fsrc -name '*.sol' | head -50\")`\n2. `solidity_scan_file` on each file\n3. Run slither: `bash(\"cd \u002Fworkspace && slither . --json slither.json\")`\n4. `slither_ingest(\"\u002Fworkspace\u002Fslither.json\")`\n5. `kg_query(kind=\"vulnerability\", min_severity=\"high\")` to see the highs\n6. For each high, generate a Foundry PoC via `foundry_reentrancy_test` etc.\n7. `bash(\"forge test -vvv --match-contract Test_\")` to run\n8. Promote passing PoCs as validated findings\n\n## Default severity floor\n| Impact                         | CVSS \u002F Reward tier |\n|--------------------------------|--------------------|\n| Loss of user funds             | Critical (9.8+)    |\n| Locked funds \u002F permanent DoS   | High (7.5-9.0)     |\n| Temporary DoS \u002F griefing       | Medium (5-7)       |\n| View-only data leak            | Low (3-5)          |\n","# Smart Contract Audit Catalog\n\n## Playbooks\n| Skill | Use for |\n|---|---|\n| `\u002Fskills\u002Fstandard\u002Fcontracts\u002Freentrancy\u002FSKILL.md`         | Classic + read-only reentrancy |\n| `\u002Fskills\u002Fstandard\u002Fcontracts\u002Foracle-manipulation\u002FSKILL.md`| Single-block TWAP \u002F spot price abuse |\n| `\u002Fskills\u002Fstandard\u002Fcontracts\u002Fflash-loan\u002FSKILL.md`         | Flash-loan callback + unauth gadgets |\n| `\u002Fskills\u002Fstandard\u002Fcontracts\u002Faccess-control\u002FSKILL.md`     | Missing modifiers, wrong msg.sender |\n| `\u002Fskills\u002Fstandard\u002Fcontracts\u002Fupgradeable-proxy\u002FSKILL.md`  | Uninitialized impl, storage clash |\n| `\u002Fskills\u002Fstandard\u002Fcontracts\u002Fsignature-replay\u002FSKILL.md`   | Cross-chain, ecrecover zero address |\n\n## Workflow\n1. Map the target: `bash(\"find \u002Fworkspace\u002Fsrc -name '*.sol' | head -50\")`\n2. `solidity_scan_file` on each file\n3. Run slither: `bash(\"cd \u002Fworkspace && slither . --json slither.json\")`\n4. `slither_ingest(\"\u002Fworkspace\u002Fslither.json\")`\n5. `kg_query(kind=\"vulnerability\", min_severity=\"high\")` to see the highs\n6. For each high, generate a Foundry PoC via `foundry_reentrancy_test` etc.\n7. `bash(\"forge test -vvv --match-contract Test_\")` to run\n8. Promote passing PoCs as validated findings\n\n## Default severity floor\n| Impact                         | CVSS \u002F Reward tier |\n|--------------------------------|--------------------|\n| Loss of user funds             | Critical (9.8+)    |\n| Locked funds \u002F permanent DoS   | High (7.5-9.0)     |\n| Temporary DoS \u002F griefing       | Medium (5-7)       |\n| View-only data leak            | Low (3-5)          |\n",{"name":5,"metadata":24,"description":7},{"subdomain":25,"when_to_use":26,"mitre_attack":27},"smart-contracts","smart contract solidity evm slither foundry defi audit lane overview routing",[28,29,30],"T1190","T1565","T1565.001","main","c0c483827a963764d5e1a663a9591867d47289e6","stack\u002Fdecepticon-slim\u002Fupstream\u002Fpackages\u002Fdecepticon\u002Fdecepticon\u002Fskills\u002Fstandard\u002Fcontracts","https:\u002F\u002Fgithub.com\u002FIwakishirokoshu\u002FHermesUltimate","https:\u002F\u002Fgithub.com\u002FIwakishirokoshu","2026-06-15 13:48:41",{"source":8,"skillName":5,"commands":38,"prompt":48,"zipAvailable":49},[39,42,45],{"tool":40,"command":41},"npx","npx skills add Iwakishirokoshu\u002FHermesUltimate --skill contracts-overview",{"tool":43,"command":44},"bunx","bunx skills add Iwakishirokoshu\u002FHermesUltimate --skill contracts-overview",{"tool":46,"command":47},"pnpm","pnpm dlx skills add Iwakishirokoshu\u002FHermesUltimate --skill contracts-overview","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FIwakishirokoshu\u002FHermesUltimate\u002Fblob\u002Fmain\u002Fstack\u002Fdecepticon-slim\u002Fupstream\u002Fpackages\u002Fdecepticon\u002Fdecepticon\u002Fskills\u002Fstandard\u002Fcontracts\u002FSKILL.md",true,[],[52,59,66,73,80,87],{"skillNo":53,"name":54,"nameZh":6,"description":55,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":56,"categories":57,"keywords":58,"publishedAt":19},"01M770W8JDE5EC1TJT4GSDWD78","wps-pixie-dust","WPS Pixie-Dust offline nonce attack (reaver -K \u002F pixiewps) and fallback online PIN brute (bully) to recover the AP's WPA PSK without capturing a handshake.","https:\u002F\u002Fgithub.com\u002FIwakishirokoshu\u002FHermesUltimate\u002Fblob\u002Fmain\u002Fstack\u002Fdecepticon-slim\u002Fupstream\u002Fpackages\u002Fdecepticon\u002Fdecepticon\u002Fskills\u002Fstandard\u002Fwireless\u002Fwps-pixie-dust\u002FSKILL.md",[],[],{"skillNo":60,"name":61,"nameZh":6,"description":62,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":63,"categories":64,"keywords":65,"publishedAt":19},"01M770W4B7T5VCVHB88V1F02H1","wpa3-sae","WPA3-SAE transition-mode downgrade (DragonShift), SSID Confusion CVE-2023-52424, Dragonblood side-channels, and SAE captive-portal credential recovery against WPA3-Personal networks.","https:\u002F\u002Fgithub.com\u002FIwakishirokoshu\u002FHermesUltimate\u002Fblob\u002Fmain\u002Fstack\u002Fdecepticon-slim\u002Fupstream\u002Fpackages\u002Fdecepticon\u002Fdecepticon\u002Fskills\u002Fstandard\u002Fwireless\u002Fwpa3-sae\u002FSKILL.md",[],[],{"skillNo":67,"name":68,"nameZh":6,"description":69,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":70,"categories":71,"keywords":72,"publishedAt":19},"01M770W093C8FAV8S34K8VB6T9","wpa2-psk","WPA\u002FWPA2-PSK handshake capture via targeted deauth + PMKID (no deauth required) + offline hashcat cracking. The most common consumer\u002FSMB encryption mode in 2026.","https:\u002F\u002Fgithub.com\u002FIwakishirokoshu\u002FHermesUltimate\u002Fblob\u002Fmain\u002Fstack\u002Fdecepticon-slim\u002Fupstream\u002Fpackages\u002Fdecepticon\u002Fdecepticon\u002Fskills\u002Fstandard\u002Fwireless\u002Fwpa2-psk\u002FSKILL.md",[],[],{"skillNo":74,"name":75,"nameZh":6,"description":76,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":77,"categories":78,"keywords":79,"publishedAt":19},"01M770VTNAQGZ3D0RQVFEKTE8Z","wpa-enterprise-eap","WPA\u002FWPA2\u002FWPA3-Enterprise (802.1X\u002FEAP) rogue-RADIUS evil-twin for MSCHAPv2 capture, GTC downgrade, and PEAP relay. MSCHAPv2 capture equals a NetNTLM hash — the primary wireless on-ramp to Active Directory.","https:\u002F\u002Fgithub.com\u002FIwakishirokoshu\u002FHermesUltimate\u002Fblob\u002Fmain\u002Fstack\u002Fdecepticon-slim\u002Fupstream\u002Fpackages\u002Fdecepticon\u002Fdecepticon\u002Fskills\u002Fstandard\u002Fwireless\u002Fwpa-enterprise-eap\u002FSKILL.md",[],[],{"skillNo":81,"name":82,"nameZh":6,"description":83,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":84,"categories":85,"keywords":86,"publishedAt":19},"01M770VNG05ZX3CV84R9GX8PJN","krack-fragattacks","KRACK key-reinstallation (CVE-2017-13077..13082) and FragAttacks fragmentation\u002Faggregation flaws (CVE-2020-24586..24588, CVE-2020-26139..26147) against legacy or embedded 802.11 supplicants with poor patch cadence.","https:\u002F\u002Fgithub.com\u002FIwakishirokoshu\u002FHermesUltimate\u002Fblob\u002Fmain\u002Fstack\u002Fdecepticon-slim\u002Fupstream\u002Fpackages\u002Fdecepticon\u002Fdecepticon\u002Fskills\u002Fstandard\u002Fwireless\u002Fkrack-fragattacks\u002FSKILL.md",[],[],{"skillNo":88,"name":89,"nameZh":6,"description":90,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":91,"categories":92,"keywords":93,"publishedAt":19},"01M770VHFH7N192V56PFSRXF5K","evil-twin-karma","Evil-twin rogue AP with KARMA\u002FMana PNL-probe response, captive-portal credential capture, and post-association MITM for PSK\u002Fopen networks. Distinct from wpa-enterprise-eap which targets 802.1X.","https:\u002F\u002Fgithub.com\u002FIwakishirokoshu\u002FHermesUltimate\u002Fblob\u002Fmain\u002Fstack\u002Fdecepticon-slim\u002Fupstream\u002Fpackages\u002Fdecepticon\u002Fdecepticon\u002Fskills\u002Fstandard\u002Fwireless\u002Fevil-twin-karma\u002FSKILL.md",[],[]]