Featured
The smart contract security set, built from real exploits and audit findings rather than generic checklists:
| Skill | What it does |
|---|---|
| solana-security-audit | Audits Solana programs against 51 vulnerability patterns across Anchor, native Rust and Pinocchio. Sealevel attacks, arithmetic safety, CPI exploits, Token-2022 extension risks, upgrade authority, on-chain randomness, with post-mortems through 2026 (Loopscale, DeFiTuna, Drift). |
| evm-contract-audit | Audits Solidity contracts using patterns learned from EVMbench: 120 real Code4rena vulnerabilities across 40 production codebases. Reentrancy, access control, flash loans, oracle manipulation, signature attacks, upgrade issues. |
| contract-decoder | Reverse-engineers deployed contract binaries. Extracts instructions, discriminators, PDAs and error codes from Solana .so files; recovers function selectors and storage layout from EVM bytecode. For bug bounty recon and verifying deployed code against source. |
| solana-best-practices | Reviews Solana programs for development best practices: 31 vulnerability patterns with 4 real-world case studies. |
Everything else, from git worktree workflows to local markdown search to macOS automation, is in the table below.