blockchain-contract-attack
Blockchain/smart contracts: Etherscan, slither/mythril, reentrancy, access control, oracles, flash loans, cross-chain bridges, and exposed RPC endpoints.
Skill by Akapi895
Chalk Labs
Need help deploying blockchain-contract-attack?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/akapi895-blockchain-contract-attack
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: documents
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/blockchain-contract-attack
What's inside
- Skill name
blockchain-contract-attack- Description
- Blockchain/smart contracts: Etherscan, slither/mythril, reentrancy, access control, oracles, flash loans, cross-chain bridges, and exposed RPC endpoints. Use when auditing smart contracts, DeFi, or blockchain attack surfaces.
- License
- Apache-2.0
- Instructions
- 11 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
## Blockchain / Smart Contracts
```
=== Blockchain / smart contracts ===
Source: Etherscan getsourcecode API | Audit with slither/mythril/manticore
Manual review: reentrancy (.call{value}: transfer before state update violates C-E-I) | access control (missing onlyOwner) | integer overflow (<0.8 without SafeMath)
oracle manipulation (instant AMM-price manipulation with a flash loan) | randomness (block.timestamp is controllable) | authorization abuse (unlimited approve/permit replay) | delegatecall proxy storage collisions
DeFi: flash-loan attacks / sandwich attacks (front-running) / governance attacks / signature replay | cross-chain bridges: signature-threshold bypass / replay | RPC: exposed 8545 allowing direct eth_sendTransaction
```From Akapi895/RedForge, Apache-2.0.
More from Akapi895/RedForge
- 0.526score
cyberstrike-eino-demo
Akapi895
Full-featured example skill package: SKILL.md + optional scripts/, references/, assets/, and other directories; validates Eino skills and HTTP…
SkillBFreshness: BClaude Code +9 - 0.524score
attack-surface-recon
Akapi895
Reconnaissance/attack-surface mapping: passive whois/amass/crt.sh/FOFA/Shodan, active subfinder/httpx/naabu/katana/nuclei, DNS geography/CDN/Nginx…
SkillBFreshness: BClaude Code +9 - 0.524score
binary-mobile-reversing
Akapi895
APK/EXE/binary: UniApp/DCloud/Flutter reverse engineering, certificate-pinning bypass, exported components, memory-corruption exploit chains, and IoT firmware.
SkillBFreshness: BClaude Code +9 - 0.524score
capability-primitive-search
Akapi895
Capability primitives + state-space search: combine primitives such as read/write/exec/ssrf into RCE equations A-F, map low-severity findings, search forward…
SkillBFreshness: BClaude Code +9 - 0.524score
cloud-attack-methods
Akapi895
Cloud attacks: metadata APIs, S3/K8s, AWS/Azure/GCP identity privilege escalation, MinIO attack matrix, Aliyun FC, and ChengZi SDK decryption.
SkillBFreshness: BClaude Code +9 - 0.524score
component-vuln-intel
Akapi895
Internet intelligence collection: after identifying a component, always perform CVE/search-engine/Chinese-community/GitHub…
SkillBFreshness: BClaude Code +9 - 0.519score
active-directory-attack
Akapi895
Internal-domain attacks: BloodHound, Kerberoast, ADCS ESC1/ESC8, NTLM Relay, coercion, DACL, DCSync, Zerologon/NoPac/PrintNightmare, mitm6, LLMNR, and Linux…
SkillBFreshness: BClaude Code +9 - 0.519score
initial-access-phishing
Akapi895
Initial access/phishing/social engineering: password spraying, AiTM, device codes, OAuth-consent phishing, payloads, and vishing.
SkillBFreshness: BClaude Code +9 - 0.519score
ai-llm-app-attack
Akapi895
AI/LLM application attacks: prompt injection, Agent tool abuse leading to RCE, RAG poisoning, MCP supply chain, and torch.load pickle RCE.
SkillBFreshness: BClaude Code +9 - 0.507score
offensive_business_logic
Akapi895
Offensive security skill for offensive business logic
SkillBFreshness: BClaude Code +9 - 0.507score
offensive_active_directory
Akapi895
Offensive security skill for offensive active directory
SkillBFreshness: BClaude Code +9 - 0.503score
offensive_anti_forensics
Akapi895
Offensive security skill for offensive anti forensics
SkillBFreshness: BClaude Code +9
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Sep 4, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- Repository
- github.com/Akapi895/RedForge
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from Akapi895
- 0.526score
cyberstrike-eino-demo
Akapi895
Full-featured example skill package: SKILL.md + optional scripts/, references/, assets/, and other directories; validates Eino skills and HTTP…
SkillBFreshness: BClaude Code +9 - 0.524score
cloud-attack-methods
Akapi895
Cloud attacks: metadata APIs, S3/K8s, AWS/Azure/GCP identity privilege escalation, MinIO attack matrix, Aliyun FC, and ChengZi SDK decryption.
SkillBFreshness: BClaude Code +9 - 0.524score
capability-primitive-search
Akapi895
Capability primitives + state-space search: combine primitives such as read/write/exec/ssrf into RCE equations A-F, map low-severity findings, search forward…
SkillBFreshness: BClaude Code +9 - 0.524score
binary-mobile-reversing
Akapi895
APK/EXE/binary: UniApp/DCloud/Flutter reverse engineering, certificate-pinning bypass, exported components, memory-corruption exploit chains, and IoT firmware.
SkillBFreshness: BClaude Code +9 - 0.524score
attack-surface-recon
Akapi895
Reconnaissance/attack-surface mapping: passive whois/amass/crt.sh/FOFA/Shodan, active subfinder/httpx/naabu/katana/nuclei, DNS geography/CDN/Nginx…
SkillBFreshness: BClaude Code +9 - 0.524score
component-vuln-intel
Akapi895
Internet intelligence collection: after identifying a component, always perform CVE/search-engine/Chinese-community/GitHub…
SkillBFreshness: BClaude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get blockchain-contract-attack running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
blockchain-contract-attack skill. Agent Mart. https://agentmart.dev/skills/akapi895-blockchain-contract-attack (last updated 2026-10-24)