Web3 Audit

Web3 Audit is a Quality skill for Claude Code, published by shuvonsec in claude-bug-bounty.

4.2K stars767 forkson shuvonsec/claude-bug-bountyAdded 2026/08/16+1% in starsRepository updated 2026/08/10

ai-securitybug-bountybugcrowdclaude-aiclaude-codectiethical-hackinghackeronehackinghacking-toolpenetration-testingreconvulnerability-scanner

Install in seconds

Install Web3 Audit

Copy Web3 Audit into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/shuvonsec/claude-bug-bounty/tree/main/skills/web3-audit ~/.claude/skills/web3-audit

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/shuvonsec/claude-bug-bounty.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/web3-audit/SKILL.md in shuvonsec/claude-bug-bounty
Installs to: ~/.claude/skills/web3-audit
Collection: One of 16 skills cataloged from this repository
Category: Quality — 1354 skills

What Web3 Audit does

Web3 Audit catalogs 10 DeFi bug classes with grep patterns, Foundry PoC templates, and pre-dive kill signals for smart contract bug bounties.

Web3 Audit is cataloged under Quality on DirSkills. Web3 Audit comes from a repository tagged ai-security, bug-bounty, bugcrowd, claude-ai and claude-code.

Documentation

README

Excerpt

WEB3 SMART CONTRACT AUDIT

10 bug classes. Pre-dive kill signals. Foundry PoC template. Real paid examples.

PRE-DIVE KILL SIGNALS (check BEFORE any code review)

ZKsync lesson: $322M TVL + OZ audit + 750K LOC + 5 sessions = 0 findings. Large well-audited bridges are extremely hard.

TVL < $500K → max payout capped too low for effort
2+ top-tier audits (Halborn, ToB, Cyfrin, OpenZeppelin) on simple protocol → bugs already found
Protocol < 500 lines, single A→B→C flow → minimal attack surface
Formula: max_realistic_payout = min(10% × TVL, program_cap) — if < $10K, skip

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Web3 Audit

What else does shuvonsec publish alongside Web3 Audit?
Web3 Audit is one of 16 skills that DirSkills catalogs from shuvonsec/claude-bug-bounty, the repository it ships in. Its siblings there include Argus, Bug Bounty and Bug Bounty. Each one is a separate skill with its own page in this directory, installs the same way Web3 Audit does, and is maintained by shuvonsec in that same repository. The rest of the collection is listed on the shuvonsec/claude-bug-bounty page.
How does Web3 Audit compare to other Quality skills?
Web3 Audit ranks #339 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Web3 Audit against them. Open each page to compare what they document and how they install.