erc4626_vault_audit
Comprehensive playbook for auditing Yield Vaults & ERC-4626 implementations
Skill by itsdarktoday
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/itsdarktoday-erc4626-vault-audit
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/erc4626-vault-audit
What's inside
- Skill name
erc4626_vault_audit- Description
- Comprehensive playbook for auditing Yield Vaults & ERC-4626 implementations
- License
- MIT
- Instructions
- 15 lines in SKILL.md · view on GitHub
Agent Skills spec issues
- name: only lowercase letters, digits and single hyphens allowed
Files (1)
- SKILL.md
SKILL.md (first lines)
# ERC-4626 Yield Vault Audit Playbook 1. **Share Pricing & First Depositor Protection**: - Check for virtual shares/assets offset (`_decimalsOffset()`). - Check initial dead shares burnt to `address(0xdead)` upon deployment. 2. **Deposit & Withdrawal Flows**: - Check slippage parameters on deposit and redeem. - Check fee deductions (management fees, performance fees, withdrawal fees) and rounding direction. 3. **Strategy Harvesting & Loss Handling**: - Check strategy report losses vs gains. - Ensure harvest cannot be front-run by large deposits followed by immediate withdrawal.
From itsdarktoday/auditcode, MIT.
More from itsdarktoday/auditcode
- 0.599score
ultimate-web3-security
itsdarktoday
Autonomous multi-chain Web3 protocol security audit skill (EVM/Solidity, Solana/Rust, Sui/Aptos Move, ZK/Circom).
SkillBFreshness: B★ 12Claude Code +9 - 0.591score
upgradeability
itsdarktoday
Security guide for upgradeable smart contracts (Transparent, UUPS, Diamond, Beacon), storage layout collisions, uninitialized constructors, and gap management.
SkillBFreshness: B★ 12Claude Code +9 - 0.591score
signatures
itsdarktoday
Vulnerability analysis guide for cryptographic signatures, EIP-712, ECDSA malleability, replay attacks, and permit vulnerabilities in smart contracts.
SkillBFreshness: B★ 12Claude Code +9 - 0.584score
math_precision
itsdarktoday
Guide to Precision Loss, Division before Multiplication, and Rounding
SkillBFreshness: B★ 12Claude Code +9 - 0.584score
erc4626_vaults
itsdarktoday
Guide to ERC-4626 Tokenized Vault Vulnerabilities and Inflation Attacks
SkillBFreshness: B★ 12Claude Code +9 - 0.584score
01_scope_recon
itsdarktoday
Smart Contract Scope & Architecture Discovery Phase Checklist
SkillBFreshness: B★ 12Claude Code +9 - 0.583score
reentrancy
itsdarktoday
Comprehensive guide to Reentrancy attacks in smart contracts
SkillBFreshness: B★ 12Claude Code +9 - 0.579score
access_control
itsdarktoday
Guide to Access Control, Initializers, and Governance Exploits
SkillBFreshness: B★ 12Claude Code +9 - 0.579score
amm_dex
itsdarktoday
Comprehensive playbook for auditing Automated Market Makers (AMMs) & DEXes
SkillBFreshness: B★ 12Claude Code +9 - 0.579score
bridge_crosschain
itsdarktoday
Comprehensive playbook for auditing Cross-Chain Bridges & Messaging Protocols
SkillBFreshness: B★ 12Claude Code +9 - 0.579score
defi_lending
itsdarktoday
Comprehensive playbook for auditing DeFi Lending & Borrowing Protocols
SkillBFreshness: B★ 12Claude Code +9 - 0.579score
03_threat_modeling
itsdarktoday
Threat Modeling, Access Control & Invariants Phase Checklist
SkillBFreshness: B★ 12Claude Code +9
Signals
- Stars
- 12
- Forks
- 6
- Open issues
- 0
- Last commit (this folder)
- Aug 27, 2026 (2 months ago)
- Last release
- Sep 15, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/itsdarktoday/auditcode
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from itsdarktoday
- 0.599score
ultimate-web3-security
itsdarktoday
Autonomous multi-chain Web3 protocol security audit skill (EVM/Solidity, Solana/Rust, Sui/Aptos Move, ZK/Circom).
SkillBFreshness: B★ 12Claude Code +9 - 0.591score
upgradeability
itsdarktoday
Security guide for upgradeable smart contracts (Transparent, UUPS, Diamond, Beacon), storage layout collisions, uninitialized constructors, and gap management.
SkillBFreshness: B★ 12Claude Code +9 - 0.591score
signatures
itsdarktoday
Vulnerability analysis guide for cryptographic signatures, EIP-712, ECDSA malleability, replay attacks, and permit vulnerabilities in smart contracts.
SkillBFreshness: B★ 12Claude Code +9 - 0.584score
01_scope_recon
itsdarktoday
Smart Contract Scope & Architecture Discovery Phase Checklist
SkillBFreshness: B★ 12Claude Code +9 - 0.584score
math_precision
itsdarktoday
Guide to Precision Loss, Division before Multiplication, and Rounding
SkillBFreshness: B★ 12Claude Code +9 - 0.584score
erc4626_vaults
itsdarktoday
Guide to ERC-4626 Tokenized Vault Vulnerabilities and Inflation Attacks
SkillBFreshness: B★ 12Claude Code +9
Cite this page
erc4626_vault_audit skill. Agent Mart. https://agentmart.dev/skills/itsdarktoday-erc4626-vault-audit (last updated 2026-10-24)