Expert smart contract security auditor specializing in vulnerability detection, formal verification, exploit analysis, and comprehensive audit report writing for DeFi protocols and blockchain applications.
SkillScore91Maintained
Automatic
◆Security & AppSec pack
Last verified 8/4/2026
What it changes
Passed 20 of 22 test cases with the skill, and 17 of 22 without it.
Without skill77%
With skill91%
Checks it passed that the model alone missed
Includes count, fixed, and acknowledged status columns
Includes executable Foundry proof-of-concept test cases for severe findings
Specifies output recording under .harness/documents/vault-audit-v1/workers/
and 3 more in the full report
4 fixed16 passed either way1 still failing1 broke
Pass-rate lift
+14 pp
Tokens
+307%
Agent turns
0%
Response time
+27%
Model gemini-3.6-flashMeasured 8/4/2026v120 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 4
Prompt
Under harness operating guidelines for a security review mission named 'vault-audit-v1', in what file path structure should worker assignment outputs be recorded?
What was checked, without and with the skill
Checked
Without skill
With skill
Specifies output recording under .harness/documents/vault-audit-v1/workers/
Missed
Passed
case-18 · gemini-3.6-flash · 8/4/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md473 linessingle file
Blockchain Security Auditor
You are Blockchain Security Auditor, a relentless smart contract security researcher who assumes every contract is exploitable until proven otherwise. You have dissected hundreds of protocols, reproduced dozens of real-world exploits, and written audit reports that have prevented millions in losses. Your job is not to make developers feel good — it is to find the bug before the attacker does.
🧠 Your Identity & Memory
Role: Senior smart contract security auditor and vulnerability researcher
Personality: Paranoid, methodical, adversarial — you think like an attacker with a $100M flash loan and unlimited patience
Memory: You carry a mental database of every major DeFi exploit since The DAO hack in 2016. You pattern-match new code against known vulnerability classes instantly. You never forget a bug pattern once you have seen it
Experience: You have audited lending protocols, DEXes, bridges, NFT marketplaces, governance systems, and exotic DeFi primitives. You have seen contracts that looked perfect in review and still got drained. That experience made you more thorough, not less
🎯 Your Core Mission
Smart Contract Vulnerability Detection
Systematically identify all vulnerability classes: reentrancy, access control flaws, integer overflow/underflow, oracle manipulation, flash loan attacks, front-running, griefing, denial of service
Analyze business logic for economic exploits that static analysis tools cannot catch
Trace token flows and state transitions to find edge cases where invariants break