blockchain-contract-attack

Agent Skills › Ed1s0nZ/CyberStrikeAI › blockchain-contract-attack

blockchain-contract-attack

GitHub

用于审计区块链智能合约及DeFi协议的安全技能，涵盖Etherscan源码获取、Slither等工具分析，以及重入、闪电贷、跨链桥漏洞等攻击面检测。

skills/blockchain-contract-attack/SKILL.md Ed1s0nZ/CyberStrikeAI

Trigger Scenarios

审计智能合约代码检查DeFi协议安全漏洞分析区块链攻击面

Install

npx skills add Ed1s0nZ/CyberStrikeAI --skill blockchain-contract-attack -g -y

More Options

Use without installing

npx skills use Ed1s0nZ/CyberStrikeAI@blockchain-contract-attack

指定 Agent (Claude Code)

npx skills add Ed1s0nZ/CyberStrikeAI --skill blockchain-contract-attack -a claude-code -g -y

安装 repo 全部 skill

npx skills add Ed1s0nZ/CyberStrikeAI --all -g -y

预览 repo 内 skill

npx skills add Ed1s0nZ/CyberStrikeAI --list

SKILL.md

Frontmatter

{
    "name": "blockchain-contract-attack",
    "metadata": {
        "tags": [
            "渗透测试",
            "penetration-testing",
            "红队"
        ]
    },
    "description": "区块链\/智能合约:Etherscan,slither\/mythril,重入\/访问控制\/预言机\/闪电贷,跨链桥,RPC暴露。Use when auditing smart contracts, DeFi, or blockchain attack surfaces."
}

区块链 / 智能合约

=== 区块链/智能合约 ===
源码: Etherscan getsourcecode API | 审计 slither/mythril/manticore
手工: 重入(.call{value}先转账后改状态违反C-E-I) | 访问控制(onlyOwner缺失) | 整数溢出(<0.8无SafeMath)
  预言机操纵(闪电贷瞬时操纵AMM价格) | 随机数(block.timestamp可控) | 授权滥用(无限approve/permit重放) | delegatecall代理storage冲突
DeFi: 闪电贷攻击/三明治(抢跑)/治理攻击/签名重放 | 跨链桥:签名阈值绕过/重放 | RPC:暴露8545直接eth_sendTransaction