{"id":"e580d233-79e4-40e7-8976-4e9a4ff723d4","entityType":"agent","slug":"clawhub-n8gendegen-atlas-smart-contract-auditor","name":"Smart Contract Audit Workflow by Atlas","canonicalUrl":"https://www.xpersona.co/agent/clawhub-n8gendegen-atlas-smart-contract-auditor","canonicalPath":"/agent/clawhub-n8gendegen-atlas-smart-contract-auditor","generatedAt":"2026-10-11T16:04:13.021Z","source":"CLAWHUB","claimStatus":"UNCLAIMED","verificationTier":"NONE","summary":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-11T13:46:35.959Z","emptyReason":null},"description":"Smart contract audit and DeFi security triage skill for Solidity, EVM protocols, bug bounty programs, Code4Arena, Sherlock, and HackenProof. Maps attack surf...","descriptionLabel":"Source description","evidenceSummary":"Capability contract not published. No trust telemetry is available yet. 1.1K downloads reported by the source. Last updated 10/11/2026.","installCommand":"clawhub skill install s178kk8n3h54fa7qzx3gsf72md85y3vm:atlas-smart-contract-auditor","sourceUrl":"https://clawhub.ai/n8gendegen/atlas-smart-contract-auditor","homepage":"https://clawhub.ai/n8gendegen/skills/atlas-smart-contract-auditor","primaryLinks":[{"label":"View on ClawHub","url":"https://clawhub.ai/n8gendegen/atlas-smart-contract-auditor","kind":"source"},{"label":"Homepage","url":"https://clawhub.ai/n8gendegen/skills/atlas-smart-contract-auditor","kind":"homepage"}],"safetyScore":84,"overallRank":62,"popularityScore":60,"trustScore":null,"claimedByName":null,"isOwner":false,"seoDescription":"Smart Contract Audit Workflow by Atlas technical dossier on Xpersona with agent coverage, OPENCLEW support, and live trust metadata."},"coverage":{"evidence":{"source":"public-profile","verified":false,"confidence":"medium","updatedAt":"2026-10-11T13:46:35.959Z","emptyReason":null},"protocols":[{"protocol":"OPENCLEW","label":"OpenClaw","status":"self-declared","notes":"Declared in the public agent profile."}],"capabilities":[],"verifiedCount":0,"selfDeclaredCount":1,"capabilityMatrix":{"rows":[{"key":"OPENCLEW","type":"protocol","support":"unknown","confidenceSource":"profile","notes":"Listed on profile"}],"flattenedTokens":"protocol:OPENCLEW|unknown|profile"}},"adoption":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-11T13:46:35.959Z","emptyReason":null},"stars":null,"forks":null,"downloads":1055,"packageName":null,"latestVersion":"1.0.5","tractionLabel":"1.1K downloads"},"release":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-11T13:46:35.895Z","emptyReason":null},"lastUpdatedAt":"2026-10-11T13:46:35.959Z","lastCrawledAt":"2026-10-11T13:46:35.895Z","lastIndexedAt":null,"nextCrawlAt":"2026-10-12T13:46:35.895Z","lastVerifiedAt":null,"highlights":[{"version":"1.0.5","createdAt":"2026-05-17T14:36:14.536Z","changelog":"Conversion SEO v1.0.5: exact-match smart contract audit title, DeFi audit keywords, star/download CTA, and paid ZIP funnel copy.","fileCount":4,"zipByteSize":5620},{"version":"1.0.4","createdAt":"2026-05-17T03:17:53.825Z","changelog":"Atlas Smart Contract Auditor 1.0.4 includes targeted SEO and conversion improvements. - Added SEO-focused keywords to description and homepage for smart contract audit, Solidity security, DeFi bug bounty, Code4rena, Sherlock, HackenProof, and audit checklist. - Updated tags to support broader discoverability in security, audit, DeFi, and vulnerability scanning contexts. - Improved homepage and upsell links to highlight Atlas Starter/Pro packs and concierge installation. - Enhanced SKILL.md with more explicit keyword and use case coverage for audit, bug bounty, and protocol security workflows.","fileCount":3,"zipByteSize":4204},{"version":"1.0.3","createdAt":"2026-05-10T14:28:00.232Z","changelog":"- Added UTM tracking parameters to the homepage URL for better download attribution. - Updated version to 1.0.3. - Changelog entry added for UTM handling.","fileCount":3,"zipByteSize":3871},{"version":"1.0.2","createdAt":"2026-05-08T15:19:12.761Z","changelog":"- Expanded SEO keywords for DeFi security, Solidity vulnerability, smart contract scanner, and EVM audit. - Added tags for security-audit, smart-contract-security, bug-bounty-triage, and specific audit types (Code4Arena, Sherlock, HackenProof). - Updated the skill description and search keywords for improved discoverability and broader use cases. - No changes made to the core logic or audit workflow; content update only.","fileCount":3,"zipByteSize":3875},{"version":"1.0.0","createdAt":"2026-05-02T17:32:55.987Z","changelog":"Initial SEO-focused release for smart contract audit discovery","fileCount":3,"zipByteSize":3631}]},"execution":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No published capability contract is available yet."},"installCommand":"clawhub skill install s178kk8n3h54fa7qzx3gsf72md85y3vm:atlas-smart-contract-auditor","setupComplexity":"low","setupSteps":["Install using `clawhub skill install s178kk8n3h54fa7qzx3gsf72md85y3vm:atlas-smart-contract-auditor` in an isolated environment before connecting it to live workloads.","No published capability contract is available yet, so validate auth and request/response behavior manually.","Review the upstream CLAWHUB listing at https://clawhub.ai/n8gendegen/atlas-smart-contract-auditor before using production credentials."],"contract":{"contractStatus":"missing","authModes":[],"requires":[],"forbidden":[],"supportsMcp":false,"supportsA2a":false,"supportsStreaming":false,"inputSchemaRef":null,"outputSchemaRef":null,"dataRegion":null,"contractUpdatedAt":null,"sourceUpdatedAt":null,"freshnessSeconds":null},"invocationGuide":{"preferredApi":{"snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-atlas-smart-contract-auditor/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-atlas-smart-contract-auditor/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-atlas-smart-contract-auditor/trust"},"curlExamples":["curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-atlas-smart-contract-auditor/snapshot\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-atlas-smart-contract-auditor/contract\"","curl -s \"https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-atlas-smart-contract-auditor/trust\""],"jsonRequestTemplate":{"query":"summarize this repo","constraints":{"maxLatencyMs":2000,"protocolPreference":["OPENCLEW"]}},"jsonResponseTemplate":{"ok":true,"result":{"summary":"...","confidence":0.9},"meta":{"source":"CLAWHUB","generatedAt":"2026-10-11T16:04:13.020Z"}},"retryPolicy":{"maxAttempts":3,"backoffMs":[500,1500,3500],"retryableConditions":["HTTP_429","HTTP_503","NETWORK_TIMEOUT"]}},"endpoints":{"dossierUrl":"https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-atlas-smart-contract-auditor/dossier","snapshotUrl":"https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-atlas-smart-contract-auditor/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-atlas-smart-contract-auditor/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/clawhub-n8gendegen-atlas-smart-contract-auditor/trust"}},"reliability":{"evidence":{"source":"runtime-metrics","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No trust, reliability, or runtime telemetry is available."},"trust":{"status":"unavailable","handshakeStatus":"UNKNOWN","verificationFreshnessHours":null,"reputationScore":null,"p95LatencyMs":null,"successRate30d":null,"fallbackRate":null,"attempts30d":null,"trustUpdatedAt":null,"trustConfidence":"unknown","sourceUpdatedAt":null,"freshnessSeconds":null},"decisionGuardrails":{"doNotUseIf":["Contract metadata is missing or unavailable for deterministic execution."],"safeUseWhen":[],"riskFlags":["missing_or_unavailable_contract","trust_data_unavailable","schema_references_missing"],"operationalConfidence":"low"},"executionMetrics":{"observedLatencyMsP50":null,"observedLatencyMsP95":null,"estimatedCostUsd":null,"uptime30d":null,"rateLimitRpm":null,"rateLimitBurst":null,"lastVerifiedAt":null,"verificationSource":null},"runtimeMetrics":{"successRate":null,"avgLatencyMs":null,"avgCostUsd":null,"hallucinationRate":null,"retryRate":null,"disputeRate":null,"p50Latency":null,"p95Latency":null,"lastUpdated":null}},"benchmarks":{"evidence":{"source":"no-benchmark-data","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No benchmark suites or observed failure patterns are available."},"suites":[],"failurePatterns":[]},"artifacts":{"evidence":{"source":"CLAWHUB","verified":false,"confidence":"medium","updatedAt":"2026-10-11T13:46:35.959Z","emptyReason":null},"readme":"Skill: Smart Contract Audit Workflow by Atlas\n\nOwner: n8gendegen\n\nSummary: Smart contract audit and DeFi security triage skill for Solidity, EVM protocols, bug bounty programs, Code4Arena, Sherlock, and HackenProof. Maps attack surf...\n\nTags: atlas:1.0.5, audit:1.0.0, bug-bounty:1.0.5, defi:1.0.0, defi-audit:1.0.5, evm:1.0.0, evm-audit:1.0.5, latest:1.0.5, security:1.0.0, security-audit:1.0.5, smart-contract:1.0.0, smart-contract-audit:1.0.5, solidity:1.0.0, solidity-audit:1.0.5, vulnerability-scanner:1.0.0\n\nVersion history:\n\nv1.0.5 | 2026-05-17T14:36:14.536Z | user\n\nConversion SEO v1.0.5: exact-match smart contract audit title, DeFi audit keywords, star/download CTA, and paid ZIP funnel copy.\n\nv1.0.4 | 2026-05-17T03:17:53.825Z | auto\n\nAtlas Smart Contract Auditor 1.0.4 includes targeted SEO and conversion improvements.\n\n- Added SEO-focused keywords to description and homepage for smart contract audit, Solidity security, DeFi bug bounty, Code4rena, Sherlock, HackenProof, and audit checklist.\n- Updated tags to support broader discoverability in security, audit, DeFi, and vulnerability scanning contexts.\n- Improved homepage and upsell links to highlight Atlas Starter/Pro packs and concierge installation.\n- Enhanced SKILL.md with more explicit keyword and use case coverage for audit, bug bounty, and protocol security workflows.\n\nv1.0.3 | 2026-05-10T14:28:00.232Z | auto\n\n- Added UTM tracking parameters to the homepage URL for better download attribution.\n- Updated version to 1.0.3.\n- Changelog entry added for UTM handling.\n\nv1.0.2 | 2026-05-08T15:19:12.761Z | auto\n\n- Expanded SEO keywords for DeFi security, Solidity vulnerability, smart contract scanner, and EVM audit.\n- Added tags for security-audit, smart-contract-security, bug-bounty-triage, and specific audit types (Code4Arena, Sherlock, HackenProof).\n- Updated the skill description and search keywords for improved discoverability and broader use cases.\n- No changes made to the core logic or audit workflow; content update only.\n\nv1.0.0 | 2026-05-02T17:32:55.987Z | user\n\nInitial SEO-focused release for smart contract audit discovery\n\nArchive index:\n\nArchive v1.0.5: 4 files, 5620 bytes\n\nFiles: _meta.json (147b), README.md (690b), skill-card.md (2311b), SKILL.md (9769b)\n\nFile v1.0.5:SKILL.md\n\n---\nname: Smart Contract Audit Workflow by Atlas\nslug: atlas-smart-contract-auditor\nversion: 1.0.5\ndescription: Smart contract audit and DeFi security triage skill for Solidity, EVM protocols, bug bounty programs, Code4Arena, Sherlock, and HackenProof. Maps attack surface, prioritizes vulnerabilities, and generates structured audit checklists and security reports. Use for smart contract review, DeFi protocol audit, Solidity vulnerability scanning, and bug bounty target triage.\nhomepage: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\nchangelog: \"Conversion SEO v1.0.5: exact-match smart contract audit title, DeFi audit keywords, star/download CTA, and paid ZIP funnel copy.\"\ntags:\n  - security\n  - audit\n  - smart-contract\n  - smart-contract-audit\n  - smart-contract-scanner\n  - defi\n  - defi-audit\n  - defi-security\n  - solidity\n  - solidity-audit\n  - solidity-vulnerability\n  - evm\n  - evm-audit\n  - vulnerability-scanner\n  - vulnerability-assessment\n  - bug-bounty\n  - bug-bounty-triage\n  - code4rena\n  - code4arena-audit\n  - sherlock\n  - sherlock-audit\n  - hackenproof\n  - hackenproof-bounty\n  - security-audit\n  - smart-contract-security\n  - defi-bounty\n  - reentrancy-checker\n  - oracle-manipulation\n  - access-control-review\n  - atlas\n  - latest\nmetadata:\n  AtlasAgentSuite:\n    tier: free\n    use_cases:\n      - smart contract audit triage\n      - DeFi protocol audit checklist\n      - Solidity vulnerability review\n      - EVM security research\n      - bug bounty target prioritization\n    upsells:\n      - \"Atlas Starter/Pro ZIP Packs ($49/$150): https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\"\n      - \"Concierge Install: https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\"\n---\n\n# Smart Contract Audit Workflow by Atlas\n\nA lightweight **smart contract audit workflow** and **DeFi audit checklist** skill for Solidity/EVM protocols, bug bounty hunters, Code4rena wardens, Sherlock auditors, and HackenProof researchers.\n\nUse this when you need a fast first-pass review of a DeFi protocol or smart contract scope before committing hours to a manual audit.\n\n## Search Keywords / Best Use Cases\n\n- paid security skill pack\n\n- smart contract audit workflow\n- smart contract audit checklist\n- smart contract audit template\n- smart contract security checklist\n- smart contract audit report template\n- DeFi audit workflow\n- DeFi audit template\n- DeFi security checklist\n- Solidity security checklist\n- Solidity audit report template\n- EVM audit checklist\n- paid smart contract audit pack\n- Atlas smart contract audit pack\n- Atlas security skill pack\n- Solidity audit template\n- DeFi audit checklist\n- bug bounty report template\n- Code4rena audit prep\n- Sherlock audit prep\n- HackenProof bounty workflow\n\n- smart contract audit\n- smart contract auditor\n- DeFi audit\n- DeFi security audit\n- Solidity audit\n- Solidity auditor\n- EVM audit\n- vulnerability scanner\n- vulnerability assessment\n- smart contract vulnerability triage\n- smart contract scanner\n- bug bounty triage\n- bug bounty automation\n- Code4rena audit workflow\n- Code4Arena warden\n- Sherlock audit workflow\n- HackenProof bounty workflow\n- access control review\n- oracle manipulation review\n- oracle manipulation attack\n- reentrancy checklist\n- reentrancy vulnerability\n- upgradeable proxy review\n- DeFi protocol security\n- smart contract security audit\n- blockchain security audit\n- Solidity vulnerability scanner\n- EVM vulnerability assessment\n- audit checklist\n- security audit report\n- vulnerability report\n- DeFi audit report\n- code review checklist\n- attack surface mapping\n- protocol audit\n- audit automation\n\n## When to Use\n\n- New smart contract audit target assigned\n- DeFi contest just opened and you need to prioritize files\n- Bug bounty scope includes Solidity/EVM contracts\n- You need a structured first-pass vulnerability checklist\n- You want to map attack surface before deep manual review\n\n## What It Produces\n\nA structured markdown audit triage report with:\n\n- Target overview\n- Protocol type and contract categories\n- Attack surface map\n- High-priority vulnerability classes\n- Contract-by-contract checklist\n- Recommended deep-dive order\n- Quick-win review items\n\n## Workflow\n\n### Phase 1: Smart Contract Scope Mapping\n\nFor each contract in scope:\n\n1. Identify protocol type: lending, AMM, vault, staking, bridge, oracle, governance, NFT, account abstraction\n2. Identify external integrations: Chainlink, Uniswap, Curve, ERC20 tokens, bridges, routers, keepers\n3. Flag proxy/upgrade patterns: `EIP1967`, `UUPS`, transparent proxy, beacon proxy, clones\n4. Identify privileged roles: owner, admin, guardian, pauser, timelock, operator\n5. Note novel or high-risk mechanisms: custom accounting, share pricing, liquidation math, rewards, TWAPs\n\n### Phase 2: DeFi Vulnerability Prioritization\n\nScore each vulnerability class by **likelihood × impact**:\n\n```text\nHIGH PRIORITY\n- Reentrancy: external calls + state changes + callbacks\n- Access control: missing modifiers, wrong role assumptions, admin bypass\n- Oracle manipulation: stale price, TWAP manipulation, decimal mismatch, fallback oracle bugs\n- Accounting bugs: share price drift, rounding loss, fee math, collateral/debt mismatch\n- Liquidation bugs: bad health factor math, stale collateral values, griefable liquidation paths\n- Upgradeability bugs: unprotected initializer, storage collision, implementation takeover\n\nMEDIUM PRIORITY\n- Fee-on-transfer / rebasing token edge cases\n- ERC777 / callback-enabled token surprises\n- Sandwich / MEV-sensitive pricing\n- DOS via unbounded loops or griefable state\n- Signature replay / permit domain separator issues\n\nLOW PRIORITY BUT CHECK\n- Input validation gaps\n- Event/reporting mismatch\n- Gas griefing\n- Minor precision loss without exploitable value extraction\n```\n\n### Phase 3: Contract-by-Contract Checklist\n\n```markdown\n## Contract: <Name>\n\n### External Calls / Reentrancy\n- [ ] External calls happen after state updates?\n- [ ] Reentrancy guard exists where callbacks are possible?\n- [ ] ERC777 / ERC721 receiver / flash loan callbacks considered?\n\n### Access Control\n- [ ] Privileged functions use correct modifier?\n- [ ] Timelock/owner/admin boundaries are clear?\n- [ ] Emergency functions cannot steal user funds?\n\n### Oracle / Pricing\n- [ ] Oracle freshness checked?\n- [ ] Decimal normalization correct?\n- [ ] Fallback oracle cannot be manipulated?\n- [ ] TWAP window long enough for protocol value at risk?\n\n### Accounting\n- [ ] Shares/assets conversion handles rounding direction correctly?\n- [ ] Fee calculations cannot drain or brick accounting?\n- [ ] Deposits/withdrawals preserve invariants?\n\n### Upgradeability\n- [ ] Initializers protected?\n- [ ] Storage layout compatible?\n- [ ] Implementation cannot be selfdestructed or hijacked?\n```\n\n### Phase 4: Audit Triage Report\n\n```markdown\n# Smart Contract Audit Triage: <Target>\n\n## Target Overview\n- Protocol type:\n- Chain(s):\n- Contracts in scope:\n- Highest-value assets:\n\n## Attack Surface Summary\n- External integrations:\n- Oracle dependencies:\n- Upgrade pattern:\n- Privileged roles:\n\n## Top Vulnerability Classes to Review\n1. [HIGH] <class> — <why this target is exposed>\n2. [HIGH] <class> — <why this target is exposed>\n3. [MEDIUM] <class> — <why this target is exposed>\n\n## Recommended Deep-Dive Order\n1. <contract> — focus on <vulnerability class>\n2. <contract> — focus on <vulnerability class>\n3. <contract> — focus on <vulnerability class>\n\n## Quick Wins Checklist\n- [ ] Reentrancy review\n- [ ] Access control review\n- [ ] Oracle manipulation review\n- [ ] Upgradeability review\n- [ ] Accounting invariant review\n\n---\nGenerated by Atlas Smart Contract Auditor.\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n```\n\n## Guardrails\n\nThis is a **triage and audit workflow**, not a guaranteed vulnerability finder. It helps prioritize manual review and produce better audit notes. Always verify candidate findings with a proof of concept before submission.\n\n## Get the Full Atlas Agent Suite\n\nThe full Atlas Bounty Ops workflow includes:\n\n- Contest monitoring for Code4rena, Sherlock, HackenProof\n- Target scoring and prioritization\n- Daily vulnerability pattern promotion\n- Finding writeup templates\n- Scheduled research briefings\n- Revenue ops and marketing agents\n\n👉 https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\n\n## Star + Download CTA\n\nIf this free smart contract audit workflow helped, please **star it on ClawHub** and share it with another auditor. Stars and comments help keep the workflow visible for `smart contract audit`, `defi audit`, and `solidity audit` searches.\n\nFor production-ready templates, use the Atlas paid ZIP packs: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\n## Upgrade: Atlas Paid ZIP Packs ($49 / $150)\n\nThis free ClawHub skill is the discovery layer. If you want the ready-to-run premium workflow, Atlas has two small ZIP packages:\n\n- **Starter — $49:** prompt pack, triage checklist, markdown report templates, and setup guide.\n- **Pro — $150:** everything in Starter plus advanced DeFi modules, risk scoring rubric, bounty-readiness checklist, and reusable audit workspace template.\n\nGet the paid packs here: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\nIf this free skill helped, please star/comment on ClawHub so other builders can find it.\n\nFile v1.0.5:README.md\n\n# Atlas Smart Contract Auditor\n\nFree lightweight smart contract audit and DeFi security triage skill from Atlas Agent Suite.\n\nUse it to map a Solidity/EVM target, prioritize vulnerability classes, and generate a structured first-pass smart contract audit report.\n\nKeywords: smart contract audit, DeFi audit, Solidity audit, EVM security, vulnerability scanner, bug bounty, Code4rena, Sherlock, HackenProof.\n\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\nConcierge install: https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\nFile v1.0.5:_meta.json\n\n{\n  \"ownerId\": \"kn781dbr70kzecrypxr3g90ckn85y6ma\",\n  \"slug\": \"atlas-smart-contract-auditor\",\n  \"version\": \"1.0.5\",\n  \"publishedAt\": 1779028574536\n}\n\nFile v1.0.5:skill-card.md\n\n## Description:\n\nSmart Contract Audit Workflow by Atlas helps agents triage Solidity/EVM and DeFi audit targets by mapping attack surfaces, prioritizing vulnerability classes, and generating structured audit checklists and reports.\n\nThis skill is ready for commercial/non-commercial use.\n\n## Publisher:\n\n[n8gendegen](https://clawhub.ai/user/n8gendegen)\n\n### License/Terms of Use:\n\nMIT-0\n\n## Use Case:\n\nExternal developers, auditors, and bug bounty researchers use this skill to perform first-pass smart contract audit triage, prioritize DeFi vulnerability classes, and produce structured audit notes before deeper manual review.\n\n### Deployment Geography for Use:\n\nGlobal\n\n## Known Risks and Mitigations:\n\nRisk: The generated audit report may include Atlas attribution and tracked promotional links.\n\nMitigation: Review the report footer before sharing externally and remove promotional attribution or tracked links when they are not appropriate.\n\nRisk: The workflow is a checklist aid and may surface candidate issues that are not validated vulnerabilities.\n\nMitigation: Manually verify findings and produce proof-of-concept evidence before submitting or relying on audit conclusions.\n\n## Reference(s):\n\n- [ClawHub skill page](https://clawhub.ai/n8gendegen/skills/atlas-smart-contract-auditor)\n- [Atlas Agent Suite skill page](https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor)\n- [Atlas concierge install](https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor)\n\n## Skill Output:\n\n**Output Type(s):** [Text, Markdown, Guidance]\n\n**Output Format:** [Markdown audit triage report and checklist guidance]\n\n**Output Parameters:** [1D]\n\n**Other Properties Related to Output:** [Produces a first-pass triage report with target overview, attack surface summary, vulnerability priorities, deep-dive order, and quick-win checklist.]\n\n## Skill Version(s):\n\n1.0.5 (source: server release evidence and skill frontmatter)\n\n## Ethical Considerations:\n\nUsers should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment.\n\nArchive v1.0.4: 3 files, 4204 bytes\n\nFiles: _meta.json (147b), README.md (690b), SKILL.md (8893b)\n\nFile v1.0.4:SKILL.md\n\n---\nname: Atlas Smart Contract Auditor\nslug: atlas-smart-contract-auditor\nversion: 1.0.4\ndescription: Smart contract audit and DeFi security triage skill for Solidity, EVM protocols, bug bounty programs, Code4Arena, Sherlock, and HackenProof. Maps attack surface, prioritizes vulnerabilities, and generates structured audit checklists and security reports. Use for smart contract review, DeFi protocol audit, Solidity vulnerability scanning, and bug bounty target triage.\nhomepage: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\nchangelog: \"Conversion SEO v1.0.4: added smart contract audit, Solidity security, DeFi bug bounty, Code4rena, Sherlock, HackenProof, and audit checklist keywords\"\ntags:\n  - security\n  - audit\n  - smart-contract\n  - smart-contract-audit\n  - smart-contract-scanner\n  - defi\n  - defi-audit\n  - defi-security\n  - solidity\n  - solidity-audit\n  - solidity-vulnerability\n  - evm\n  - evm-audit\n  - vulnerability-scanner\n  - vulnerability-assessment\n  - bug-bounty\n  - bug-bounty-triage\n  - code4rena\n  - code4arena-audit\n  - sherlock\n  - sherlock-audit\n  - hackenproof\n  - hackenproof-bounty\n  - security-audit\n  - smart-contract-security\n  - defi-bounty\n  - reentrancy-checker\n  - oracle-manipulation\n  - access-control-review\n  - atlas\n  - latest\nmetadata:\n  AtlasAgentSuite:\n    tier: free\n    use_cases:\n      - smart contract audit triage\n      - DeFi protocol audit checklist\n      - Solidity vulnerability review\n      - EVM security research\n      - bug bounty target prioritization\n    upsells:\n      - \"Atlas Starter/Pro ZIP Packs ($49/$150): https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\"\n      - \"Concierge Install: https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\"\n---\n\n# Atlas Smart Contract Auditor\n\nA lightweight **smart contract audit** and **DeFi security triage** skill for Solidity/EVM protocols, bug bounty hunters, Code4rena wardens, Sherlock auditors, and HackenProof researchers.\n\nUse this when you need a fast first-pass review of a DeFi protocol or smart contract scope before committing hours to a manual audit.\n\n## Search Keywords / Best Use Cases\n\n- paid security skill pack\n- Solidity audit template\n- DeFi audit checklist\n- bug bounty report template\n- Code4rena audit prep\n- Sherlock audit prep\n- HackenProof bounty workflow\n\n- smart contract audit\n- smart contract auditor\n- DeFi audit\n- DeFi security audit\n- Solidity audit\n- Solidity auditor\n- EVM audit\n- vulnerability scanner\n- vulnerability assessment\n- smart contract vulnerability triage\n- smart contract scanner\n- bug bounty triage\n- bug bounty automation\n- Code4rena audit workflow\n- Code4Arena warden\n- Sherlock audit workflow\n- HackenProof bounty workflow\n- access control review\n- oracle manipulation review\n- oracle manipulation attack\n- reentrancy checklist\n- reentrancy vulnerability\n- upgradeable proxy review\n- DeFi protocol security\n- smart contract security audit\n- blockchain security audit\n- Solidity vulnerability scanner\n- EVM vulnerability assessment\n- audit checklist\n- security audit report\n- vulnerability report\n- DeFi audit report\n- code review checklist\n- attack surface mapping\n- protocol audit\n- audit automation\n\n## When to Use\n\n- New smart contract audit target assigned\n- DeFi contest just opened and you need to prioritize files\n- Bug bounty scope includes Solidity/EVM contracts\n- You need a structured first-pass vulnerability checklist\n- You want to map attack surface before deep manual review\n\n## What It Produces\n\nA structured markdown audit triage report with:\n\n- Target overview\n- Protocol type and contract categories\n- Attack surface map\n- High-priority vulnerability classes\n- Contract-by-contract checklist\n- Recommended deep-dive order\n- Quick-win review items\n\n## Workflow\n\n### Phase 1: Smart Contract Scope Mapping\n\nFor each contract in scope:\n\n1. Identify protocol type: lending, AMM, vault, staking, bridge, oracle, governance, NFT, account abstraction\n2. Identify external integrations: Chainlink, Uniswap, Curve, ERC20 tokens, bridges, routers, keepers\n3. Flag proxy/upgrade patterns: `EIP1967`, `UUPS`, transparent proxy, beacon proxy, clones\n4. Identify privileged roles: owner, admin, guardian, pauser, timelock, operator\n5. Note novel or high-risk mechanisms: custom accounting, share pricing, liquidation math, rewards, TWAPs\n\n### Phase 2: DeFi Vulnerability Prioritization\n\nScore each vulnerability class by **likelihood × impact**:\n\n```text\nHIGH PRIORITY\n- Reentrancy: external calls + state changes + callbacks\n- Access control: missing modifiers, wrong role assumptions, admin bypass\n- Oracle manipulation: stale price, TWAP manipulation, decimal mismatch, fallback oracle bugs\n- Accounting bugs: share price drift, rounding loss, fee math, collateral/debt mismatch\n- Liquidation bugs: bad health factor math, stale collateral values, griefable liquidation paths\n- Upgradeability bugs: unprotected initializer, storage collision, implementation takeover\n\nMEDIUM PRIORITY\n- Fee-on-transfer / rebasing token edge cases\n- ERC777 / callback-enabled token surprises\n- Sandwich / MEV-sensitive pricing\n- DOS via unbounded loops or griefable state\n- Signature replay / permit domain separator issues\n\nLOW PRIORITY BUT CHECK\n- Input validation gaps\n- Event/reporting mismatch\n- Gas griefing\n- Minor precision loss without exploitable value extraction\n```\n\n### Phase 3: Contract-by-Contract Checklist\n\n```markdown\n## Contract: <Name>\n\n### External Calls / Reentrancy\n- [ ] External calls happen after state updates?\n- [ ] Reentrancy guard exists where callbacks are possible?\n- [ ] ERC777 / ERC721 receiver / flash loan callbacks considered?\n\n### Access Control\n- [ ] Privileged functions use correct modifier?\n- [ ] Timelock/owner/admin boundaries are clear?\n- [ ] Emergency functions cannot steal user funds?\n\n### Oracle / Pricing\n- [ ] Oracle freshness checked?\n- [ ] Decimal normalization correct?\n- [ ] Fallback oracle cannot be manipulated?\n- [ ] TWAP window long enough for protocol value at risk?\n\n### Accounting\n- [ ] Shares/assets conversion handles rounding direction correctly?\n- [ ] Fee calculations cannot drain or brick accounting?\n- [ ] Deposits/withdrawals preserve invariants?\n\n### Upgradeability\n- [ ] Initializers protected?\n- [ ] Storage layout compatible?\n- [ ] Implementation cannot be selfdestructed or hijacked?\n```\n\n### Phase 4: Audit Triage Report\n\n```markdown\n# Smart Contract Audit Triage: <Target>\n\n## Target Overview\n- Protocol type:\n- Chain(s):\n- Contracts in scope:\n- Highest-value assets:\n\n## Attack Surface Summary\n- External integrations:\n- Oracle dependencies:\n- Upgrade pattern:\n- Privileged roles:\n\n## Top Vulnerability Classes to Review\n1. [HIGH] <class> — <why this target is exposed>\n2. [HIGH] <class> — <why this target is exposed>\n3. [MEDIUM] <class> — <why this target is exposed>\n\n## Recommended Deep-Dive Order\n1. <contract> — focus on <vulnerability class>\n2. <contract> — focus on <vulnerability class>\n3. <contract> — focus on <vulnerability class>\n\n## Quick Wins Checklist\n- [ ] Reentrancy review\n- [ ] Access control review\n- [ ] Oracle manipulation review\n- [ ] Upgradeability review\n- [ ] Accounting invariant review\n\n---\nGenerated by Atlas Smart Contract Auditor.\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n```\n\n## Guardrails\n\nThis is a **triage and audit workflow**, not a guaranteed vulnerability finder. It helps prioritize manual review and produce better audit notes. Always verify candidate findings with a proof of concept before submission.\n\n## Get the Full Atlas Agent Suite\n\nThe full Atlas Bounty Ops workflow includes:\n\n- Contest monitoring for Code4rena, Sherlock, HackenProof\n- Target scoring and prioritization\n- Daily vulnerability pattern promotion\n- Finding writeup templates\n- Scheduled research briefings\n- Revenue ops and marketing agents\n\n👉 https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\n\n## Upgrade: Atlas Paid ZIP Packs ($49 / $150)\n\nThis free ClawHub skill is the discovery layer. If you want the ready-to-run premium workflow, Atlas has two small ZIP packages:\n\n- **Starter — $49:** prompt pack, triage checklist, markdown report templates, and setup guide.\n- **Pro — $150:** everything in Starter plus advanced DeFi modules, risk scoring rubric, bounty-readiness checklist, and reusable audit workspace template.\n\nGet the paid packs here: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\nIf this free skill helped, please star/comment on ClawHub so other builders can find it.\n\nFile v1.0.4:README.md\n\n# Atlas Smart Contract Auditor\n\nFree lightweight smart contract audit and DeFi security triage skill from Atlas Agent Suite.\n\nUse it to map a Solidity/EVM target, prioritize vulnerability classes, and generate a structured first-pass smart contract audit report.\n\nKeywords: smart contract audit, DeFi audit, Solidity audit, EVM security, vulnerability scanner, bug bounty, Code4rena, Sherlock, HackenProof.\n\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\nConcierge install: https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\nFile v1.0.4:_meta.json\n\n{\n  \"ownerId\": \"kn781dbr70kzecrypxr3g90ckn85y6ma\",\n  \"slug\": \"atlas-smart-contract-auditor\",\n  \"version\": \"1.0.4\",\n  \"publishedAt\": 1778987873825\n}\n\nArchive v1.0.3: 3 files, 3871 bytes\n\nFiles: _meta.json (147b), README.md (690b), SKILL.md (7931b)\n\nFile v1.0.3:SKILL.md\n\n---\nname: Atlas Smart Contract Auditor\nslug: atlas-smart-contract-auditor\nversion: 1.0.3\ndescription: Smart contract audit and DeFi security triage skill for Solidity, EVM protocols, bug bounty programs, Code4Arena, Sherlock, and HackenProof. Maps attack surface, prioritizes vulnerabilities, and generates structured audit checklists and security reports. Use for smart contract review, DeFi protocol audit, Solidity vulnerability scanning, and bug bounty target triage.\nhomepage: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_content=atlas-smart-contract-auditor\nchangelog: \"UTM v1.0.3: added UTM tracking for download attribution\"\ntags:\n  - security\n  - audit\n  - smart-contract\n  - smart-contract-audit\n  - smart-contract-scanner\n  - defi\n  - defi-audit\n  - defi-security\n  - solidity\n  - solidity-audit\n  - solidity-vulnerability\n  - evm\n  - evm-audit\n  - vulnerability-scanner\n  - vulnerability-assessment\n  - bug-bounty\n  - bug-bounty-triage\n  - code4rena\n  - code4arena-audit\n  - sherlock\n  - sherlock-audit\n  - hackenproof\n  - hackenproof-bounty\n  - security-audit\n  - smart-contract-security\n  - defi-bounty\n  - reentrancy-checker\n  - oracle-manipulation\n  - access-control-review\n  - atlas\n  - latest\nmetadata:\n  AtlasAgentSuite:\n    tier: free\n    use_cases:\n      - smart contract audit triage\n      - DeFi protocol audit checklist\n      - Solidity vulnerability review\n      - EVM security research\n      - bug bounty target prioritization\n    upsells:\n      - \"Full Atlas Bounty Ops: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\"\n      - \"Concierge Install: https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\"\n---\n\n# Atlas Smart Contract Auditor\n\nA lightweight **smart contract audit** and **DeFi security triage** skill for Solidity/EVM protocols, bug bounty hunters, Code4rena wardens, Sherlock auditors, and HackenProof researchers.\n\nUse this when you need a fast first-pass review of a DeFi protocol or smart contract scope before committing hours to a manual audit.\n\n## Search Keywords / Best Use Cases\n\n- smart contract audit\n- smart contract auditor\n- DeFi audit\n- DeFi security audit\n- Solidity audit\n- Solidity auditor\n- EVM audit\n- vulnerability scanner\n- vulnerability assessment\n- smart contract vulnerability triage\n- smart contract scanner\n- bug bounty triage\n- bug bounty automation\n- Code4rena audit workflow\n- Code4Arena warden\n- Sherlock audit workflow\n- HackenProof bounty workflow\n- access control review\n- oracle manipulation review\n- oracle manipulation attack\n- reentrancy checklist\n- reentrancy vulnerability\n- upgradeable proxy review\n- DeFi protocol security\n- smart contract security audit\n- blockchain security audit\n- Solidity vulnerability scanner\n- EVM vulnerability assessment\n- audit checklist\n- security audit report\n- vulnerability report\n- DeFi audit report\n- code review checklist\n- attack surface mapping\n- protocol audit\n- audit automation\n\n## When to Use\n\n- New smart contract audit target assigned\n- DeFi contest just opened and you need to prioritize files\n- Bug bounty scope includes Solidity/EVM contracts\n- You need a structured first-pass vulnerability checklist\n- You want to map attack surface before deep manual review\n\n## What It Produces\n\nA structured markdown audit triage report with:\n\n- Target overview\n- Protocol type and contract categories\n- Attack surface map\n- High-priority vulnerability classes\n- Contract-by-contract checklist\n- Recommended deep-dive order\n- Quick-win review items\n\n## Workflow\n\n### Phase 1: Smart Contract Scope Mapping\n\nFor each contract in scope:\n\n1. Identify protocol type: lending, AMM, vault, staking, bridge, oracle, governance, NFT, account abstraction\n2. Identify external integrations: Chainlink, Uniswap, Curve, ERC20 tokens, bridges, routers, keepers\n3. Flag proxy/upgrade patterns: `EIP1967`, `UUPS`, transparent proxy, beacon proxy, clones\n4. Identify privileged roles: owner, admin, guardian, pauser, timelock, operator\n5. Note novel or high-risk mechanisms: custom accounting, share pricing, liquidation math, rewards, TWAPs\n\n### Phase 2: DeFi Vulnerability Prioritization\n\nScore each vulnerability class by **likelihood × impact**:\n\n```text\nHIGH PRIORITY\n- Reentrancy: external calls + state changes + callbacks\n- Access control: missing modifiers, wrong role assumptions, admin bypass\n- Oracle manipulation: stale price, TWAP manipulation, decimal mismatch, fallback oracle bugs\n- Accounting bugs: share price drift, rounding loss, fee math, collateral/debt mismatch\n- Liquidation bugs: bad health factor math, stale collateral values, griefable liquidation paths\n- Upgradeability bugs: unprotected initializer, storage collision, implementation takeover\n\nMEDIUM PRIORITY\n- Fee-on-transfer / rebasing token edge cases\n- ERC777 / callback-enabled token surprises\n- Sandwich / MEV-sensitive pricing\n- DOS via unbounded loops or griefable state\n- Signature replay / permit domain separator issues\n\nLOW PRIORITY BUT CHECK\n- Input validation gaps\n- Event/reporting mismatch\n- Gas griefing\n- Minor precision loss without exploitable value extraction\n```\n\n### Phase 3: Contract-by-Contract Checklist\n\n```markdown\n## Contract: <Name>\n\n### External Calls / Reentrancy\n- [ ] External calls happen after state updates?\n- [ ] Reentrancy guard exists where callbacks are possible?\n- [ ] ERC777 / ERC721 receiver / flash loan callbacks considered?\n\n### Access Control\n- [ ] Privileged functions use correct modifier?\n- [ ] Timelock/owner/admin boundaries are clear?\n- [ ] Emergency functions cannot steal user funds?\n\n### Oracle / Pricing\n- [ ] Oracle freshness checked?\n- [ ] Decimal normalization correct?\n- [ ] Fallback oracle cannot be manipulated?\n- [ ] TWAP window long enough for protocol value at risk?\n\n### Accounting\n- [ ] Shares/assets conversion handles rounding direction correctly?\n- [ ] Fee calculations cannot drain or brick accounting?\n- [ ] Deposits/withdrawals preserve invariants?\n\n### Upgradeability\n- [ ] Initializers protected?\n- [ ] Storage layout compatible?\n- [ ] Implementation cannot be selfdestructed or hijacked?\n```\n\n### Phase 4: Audit Triage Report\n\n```markdown\n# Smart Contract Audit Triage: <Target>\n\n## Target Overview\n- Protocol type:\n- Chain(s):\n- Contracts in scope:\n- Highest-value assets:\n\n## Attack Surface Summary\n- External integrations:\n- Oracle dependencies:\n- Upgrade pattern:\n- Privileged roles:\n\n## Top Vulnerability Classes to Review\n1. [HIGH] <class> — <why this target is exposed>\n2. [HIGH] <class> — <why this target is exposed>\n3. [MEDIUM] <class> — <why this target is exposed>\n\n## Recommended Deep-Dive Order\n1. <contract> — focus on <vulnerability class>\n2. <contract> — focus on <vulnerability class>\n3. <contract> — focus on <vulnerability class>\n\n## Quick Wins Checklist\n- [ ] Reentrancy review\n- [ ] Access control review\n- [ ] Oracle manipulation review\n- [ ] Upgradeability review\n- [ ] Accounting invariant review\n\n---\nGenerated by Atlas Smart Contract Auditor.\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n```\n\n## Guardrails\n\nThis is a **triage and audit workflow**, not a guaranteed vulnerability finder. It helps prioritize manual review and produce better audit notes. Always verify candidate findings with a proof of concept before submission.\n\n## Get the Full Atlas Agent Suite\n\nThe full Atlas Bounty Ops workflow includes:\n\n- Contest monitoring for Code4rena, Sherlock, HackenProof\n- Target scoring and prioritization\n- Daily vulnerability pattern promotion\n- Finding writeup templates\n- Scheduled research briefings\n- Revenue ops and marketing agents\n\n👉 https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\nFile v1.0.3:README.md\n\n# Atlas Smart Contract Auditor\n\nFree lightweight smart contract audit and DeFi security triage skill from Atlas Agent Suite.\n\nUse it to map a Solidity/EVM target, prioritize vulnerability classes, and generate a structured first-pass smart contract audit report.\n\nKeywords: smart contract audit, DeFi audit, Solidity audit, EVM security, vulnerability scanner, bug bounty, Code4rena, Sherlock, HackenProof.\n\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\nConcierge install: https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\nFile v1.0.3:_meta.json\n\n{\n  \"ownerId\": \"kn781dbr70kzecrypxr3g90ckn85y6ma\",\n  \"slug\": \"atlas-smart-contract-auditor\",\n  \"version\": \"1.0.3\",\n  \"publishedAt\": 1778423280232\n}\n\nArchive v1.0.2: 3 files, 3875 bytes\n\nFiles: _meta.json (147b), README.md (690b), SKILL.md (7955b)\n\nFile v1.0.2:SKILL.md\n\n---\nname: Atlas Smart Contract Auditor\nslug: atlas-smart-contract-auditor\nversion: 1.0.2\ndescription: Smart contract audit and DeFi security triage skill for Solidity, EVM protocols, bug bounty programs, Code4Arena, Sherlock, and HackenProof. Maps attack surface, prioritizes vulnerabilities, and generates structured audit checklists and security reports. Use for smart contract review, DeFi protocol audit, Solidity vulnerability scanning, and bug bounty target triage.\nhomepage: https://atlasagentsuite.com/skills.html\nchangelog: \"SEO v1.0.2: added DeFi security, Solidity vulnerability, smart contract scanner, EVM audit, Code4Arena workflow, Sherlock audit, HackenProof bounty keywords\"\ntags:\n  - security\n  - audit\n  - smart-contract\n  - smart-contract-audit\n  - smart-contract-scanner\n  - defi\n  - defi-audit\n  - defi-security\n  - solidity\n  - solidity-audit\n  - solidity-vulnerability\n  - evm\n  - evm-audit\n  - vulnerability-scanner\n  - vulnerability-assessment\n  - bug-bounty\n  - bug-bounty-triage\n  - code4rena\n  - code4arena-audit\n  - sherlock\n  - sherlock-audit\n  - hackenproof\n  - hackenproof-bounty\n  - security-audit\n  - smart-contract-security\n  - defi-bounty\n  - reentrancy-checker\n  - oracle-manipulation\n  - access-control-review\n  - atlas\n  - latest\nmetadata:\n  AtlasAgentSuite:\n    tier: free\n    use_cases:\n      - smart contract audit triage\n      - DeFi protocol audit checklist\n      - Solidity vulnerability review\n      - EVM security research\n      - bug bounty target prioritization\n    upsells:\n      - \"Full Atlas Bounty Ops: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\"\n      - \"Concierge Install: https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\"\n---\n\n# Atlas Smart Contract Auditor\n\nA lightweight **smart contract audit** and **DeFi security triage** skill for Solidity/EVM protocols, bug bounty hunters, Code4rena wardens, Sherlock auditors, and HackenProof researchers.\n\nUse this when you need a fast first-pass review of a DeFi protocol or smart contract scope before committing hours to a manual audit.\n\n## Search Keywords / Best Use Cases\n\n- smart contract audit\n- smart contract auditor\n- DeFi audit\n- DeFi security audit\n- Solidity audit\n- Solidity auditor\n- EVM audit\n- vulnerability scanner\n- vulnerability assessment\n- smart contract vulnerability triage\n- smart contract scanner\n- bug bounty triage\n- bug bounty automation\n- Code4rena audit workflow\n- Code4Arena warden\n- Sherlock audit workflow\n- HackenProof bounty workflow\n- access control review\n- oracle manipulation review\n- oracle manipulation attack\n- reentrancy checklist\n- reentrancy vulnerability\n- upgradeable proxy review\n- DeFi protocol security\n- smart contract security audit\n- blockchain security audit\n- Solidity vulnerability scanner\n- EVM vulnerability assessment\n- audit checklist\n- security audit report\n- vulnerability report\n- DeFi audit report\n- code review checklist\n- attack surface mapping\n- protocol audit\n- audit automation\n\n## When to Use\n\n- New smart contract audit target assigned\n- DeFi contest just opened and you need to prioritize files\n- Bug bounty scope includes Solidity/EVM contracts\n- You need a structured first-pass vulnerability checklist\n- You want to map attack surface before deep manual review\n\n## What It Produces\n\nA structured markdown audit triage report with:\n\n- Target overview\n- Protocol type and contract categories\n- Attack surface map\n- High-priority vulnerability classes\n- Contract-by-contract checklist\n- Recommended deep-dive order\n- Quick-win review items\n\n## Workflow\n\n### Phase 1: Smart Contract Scope Mapping\n\nFor each contract in scope:\n\n1. Identify protocol type: lending, AMM, vault, staking, bridge, oracle, governance, NFT, account abstraction\n2. Identify external integrations: Chainlink, Uniswap, Curve, ERC20 tokens, bridges, routers, keepers\n3. Flag proxy/upgrade patterns: `EIP1967`, `UUPS`, transparent proxy, beacon proxy, clones\n4. Identify privileged roles: owner, admin, guardian, pauser, timelock, operator\n5. Note novel or high-risk mechanisms: custom accounting, share pricing, liquidation math, rewards, TWAPs\n\n### Phase 2: DeFi Vulnerability Prioritization\n\nScore each vulnerability class by **likelihood × impact**:\n\n```text\nHIGH PRIORITY\n- Reentrancy: external calls + state changes + callbacks\n- Access control: missing modifiers, wrong role assumptions, admin bypass\n- Oracle manipulation: stale price, TWAP manipulation, decimal mismatch, fallback oracle bugs\n- Accounting bugs: share price drift, rounding loss, fee math, collateral/debt mismatch\n- Liquidation bugs: bad health factor math, stale collateral values, griefable liquidation paths\n- Upgradeability bugs: unprotected initializer, storage collision, implementation takeover\n\nMEDIUM PRIORITY\n- Fee-on-transfer / rebasing token edge cases\n- ERC777 / callback-enabled token surprises\n- Sandwich / MEV-sensitive pricing\n- DOS via unbounded loops or griefable state\n- Signature replay / permit domain separator issues\n\nLOW PRIORITY BUT CHECK\n- Input validation gaps\n- Event/reporting mismatch\n- Gas griefing\n- Minor precision loss without exploitable value extraction\n```\n\n### Phase 3: Contract-by-Contract Checklist\n\n```markdown\n## Contract: <Name>\n\n### External Calls / Reentrancy\n- [ ] External calls happen after state updates?\n- [ ] Reentrancy guard exists where callbacks are possible?\n- [ ] ERC777 / ERC721 receiver / flash loan callbacks considered?\n\n### Access Control\n- [ ] Privileged functions use correct modifier?\n- [ ] Timelock/owner/admin boundaries are clear?\n- [ ] Emergency functions cannot steal user funds?\n\n### Oracle / Pricing\n- [ ] Oracle freshness checked?\n- [ ] Decimal normalization correct?\n- [ ] Fallback oracle cannot be manipulated?\n- [ ] TWAP window long enough for protocol value at risk?\n\n### Accounting\n- [ ] Shares/assets conversion handles rounding direction correctly?\n- [ ] Fee calculations cannot drain or brick accounting?\n- [ ] Deposits/withdrawals preserve invariants?\n\n### Upgradeability\n- [ ] Initializers protected?\n- [ ] Storage layout compatible?\n- [ ] Implementation cannot be selfdestructed or hijacked?\n```\n\n### Phase 4: Audit Triage Report\n\n```markdown\n# Smart Contract Audit Triage: <Target>\n\n## Target Overview\n- Protocol type:\n- Chain(s):\n- Contracts in scope:\n- Highest-value assets:\n\n## Attack Surface Summary\n- External integrations:\n- Oracle dependencies:\n- Upgrade pattern:\n- Privileged roles:\n\n## Top Vulnerability Classes to Review\n1. [HIGH] <class> — <why this target is exposed>\n2. [HIGH] <class> — <why this target is exposed>\n3. [MEDIUM] <class> — <why this target is exposed>\n\n## Recommended Deep-Dive Order\n1. <contract> — focus on <vulnerability class>\n2. <contract> — focus on <vulnerability class>\n3. <contract> — focus on <vulnerability class>\n\n## Quick Wins Checklist\n- [ ] Reentrancy review\n- [ ] Access control review\n- [ ] Oracle manipulation review\n- [ ] Upgradeability review\n- [ ] Accounting invariant review\n\n---\nGenerated by Atlas Smart Contract Auditor.\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n```\n\n## Guardrails\n\nThis is a **triage and audit workflow**, not a guaranteed vulnerability finder. It helps prioritize manual review and produce better audit notes. Always verify candidate findings with a proof of concept before submission.\n\n## Get the Full Atlas Agent Suite\n\nThe full Atlas Bounty Ops workflow includes:\n\n- Contest monitoring for Code4rena, Sherlock, HackenProof\n- Target scoring and prioritization\n- Daily vulnerability pattern promotion\n- Finding writeup templates\n- Scheduled research briefings\n- Revenue ops and marketing agents\n\n👉 https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\nFile v1.0.2:README.md\n\n# Atlas Smart Contract Auditor\n\nFree lightweight smart contract audit and DeFi security triage skill from Atlas Agent Suite.\n\nUse it to map a Solidity/EVM target, prioritize vulnerability classes, and generate a structured first-pass smart contract audit report.\n\nKeywords: smart contract audit, DeFi audit, Solidity audit, EVM security, vulnerability scanner, bug bounty, Code4rena, Sherlock, HackenProof.\n\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\nConcierge install: https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\nFile v1.0.2:_meta.json\n\n{\n  \"ownerId\": \"kn781dbr70kzecrypxr3g90ckn85y6ma\",\n  \"slug\": \"atlas-smart-contract-auditor\",\n  \"version\": \"1.0.2\",\n  \"publishedAt\": 1778253552761\n}\n\nArchive v1.0.0: 3 files, 3631 bytes\n\nFiles: README.md (690b), SKILL.md (6886b), _meta.json (147b)\n\nFile v1.0.0:SKILL.md\n\n---\nname: Atlas Smart Contract Auditor\nslug: atlas-smart-contract-auditor\nversion: 1.0.1\ndescription: Smart contract audit and DeFi security triage skill for Solidity, EVM protocols, bug bounty programs, Code4rena, Sherlock, and HackenProof. Maps attack surface, prioritizes vulnerabilities, and generates a structured audit checklist/report.\nhomepage: https://atlasagentsuite.com/skills.html\nchangelog: \"SEO update: added smart contract audit, DeFi audit, Solidity, EVM, vulnerability scanner keywords\"\ntags:\n  - security\n  - audit\n  - smart-contract\n  - smart-contract-audit\n  - defi\n  - defi-audit\n  - solidity\n  - evm\n  - vulnerability-scanner\n  - bug-bounty\n  - code4rena\n  - sherlock\n  - hackenproof\n  - atlas\nmetadata:\n  AtlasAgentSuite:\n    tier: free\n    use_cases:\n      - smart contract audit triage\n      - DeFi protocol audit checklist\n      - Solidity vulnerability review\n      - EVM security research\n      - bug bounty target prioritization\n    upsells:\n      - \"Full Atlas Bounty Ops: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\"\n      - \"Concierge Install: https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\"\n---\n\n# Atlas Smart Contract Auditor\n\nA lightweight **smart contract audit** and **DeFi security triage** skill for Solidity/EVM protocols, bug bounty hunters, Code4rena wardens, Sherlock auditors, and HackenProof researchers.\n\nUse this when you need a fast first-pass review of a DeFi protocol or smart contract scope before committing hours to a manual audit.\n\n## Search Keywords / Best Use Cases\n\n- smart contract audit\n- DeFi audit\n- DeFi security audit\n- Solidity audit\n- EVM audit\n- vulnerability scanner\n- smart contract vulnerability triage\n- bug bounty triage\n- Code4rena audit workflow\n- Sherlock audit workflow\n- HackenProof bounty workflow\n- access control review\n- oracle manipulation review\n- reentrancy checklist\n- upgradeable proxy review\n\n## When to Use\n\n- New smart contract audit target assigned\n- DeFi contest just opened and you need to prioritize files\n- Bug bounty scope includes Solidity/EVM contracts\n- You need a structured first-pass vulnerability checklist\n- You want to map attack surface before deep manual review\n\n## What It Produces\n\nA structured markdown audit triage report with:\n\n- Target overview\n- Protocol type and contract categories\n- Attack surface map\n- High-priority vulnerability classes\n- Contract-by-contract checklist\n- Recommended deep-dive order\n- Quick-win review items\n\n## Workflow\n\n### Phase 1: Smart Contract Scope Mapping\n\nFor each contract in scope:\n\n1. Identify protocol type: lending, AMM, vault, staking, bridge, oracle, governance, NFT, account abstraction\n2. Identify external integrations: Chainlink, Uniswap, Curve, ERC20 tokens, bridges, routers, keepers\n3. Flag proxy/upgrade patterns: `EIP1967`, `UUPS`, transparent proxy, beacon proxy, clones\n4. Identify privileged roles: owner, admin, guardian, pauser, timelock, operator\n5. Note novel or high-risk mechanisms: custom accounting, share pricing, liquidation math, rewards, TWAPs\n\n### Phase 2: DeFi Vulnerability Prioritization\n\nScore each vulnerability class by **likelihood × impact**:\n\n```text\nHIGH PRIORITY\n- Reentrancy: external calls + state changes + callbacks\n- Access control: missing modifiers, wrong role assumptions, admin bypass\n- Oracle manipulation: stale price, TWAP manipulation, decimal mismatch, fallback oracle bugs\n- Accounting bugs: share price drift, rounding loss, fee math, collateral/debt mismatch\n- Liquidation bugs: bad health factor math, stale collateral values, griefable liquidation paths\n- Upgradeability bugs: unprotected initializer, storage collision, implementation takeover\n\nMEDIUM PRIORITY\n- Fee-on-transfer / rebasing token edge cases\n- ERC777 / callback-enabled token surprises\n- Sandwich / MEV-sensitive pricing\n- DOS via unbounded loops or griefable state\n- Signature replay / permit domain separator issues\n\nLOW PRIORITY BUT CHECK\n- Input validation gaps\n- Event/reporting mismatch\n- Gas griefing\n- Minor precision loss without exploitable value extraction\n```\n\n### Phase 3: Contract-by-Contract Checklist\n\n```markdown\n## Contract: <Name>\n\n### External Calls / Reentrancy\n- [ ] External calls happen after state updates?\n- [ ] Reentrancy guard exists where callbacks are possible?\n- [ ] ERC777 / ERC721 receiver / flash loan callbacks considered?\n\n### Access Control\n- [ ] Privileged functions use correct modifier?\n- [ ] Timelock/owner/admin boundaries are clear?\n- [ ] Emergency functions cannot steal user funds?\n\n### Oracle / Pricing\n- [ ] Oracle freshness checked?\n- [ ] Decimal normalization correct?\n- [ ] Fallback oracle cannot be manipulated?\n- [ ] TWAP window long enough for protocol value at risk?\n\n### Accounting\n- [ ] Shares/assets conversion handles rounding direction correctly?\n- [ ] Fee calculations cannot drain or brick accounting?\n- [ ] Deposits/withdrawals preserve invariants?\n\n### Upgradeability\n- [ ] Initializers protected?\n- [ ] Storage layout compatible?\n- [ ] Implementation cannot be selfdestructed or hijacked?\n```\n\n### Phase 4: Audit Triage Report\n\n```markdown\n# Smart Contract Audit Triage: <Target>\n\n## Target Overview\n- Protocol type:\n- Chain(s):\n- Contracts in scope:\n- Highest-value assets:\n\n## Attack Surface Summary\n- External integrations:\n- Oracle dependencies:\n- Upgrade pattern:\n- Privileged roles:\n\n## Top Vulnerability Classes to Review\n1. [HIGH] <class> — <why this target is exposed>\n2. [HIGH] <class> — <why this target is exposed>\n3. [MEDIUM] <class> — <why this target is exposed>\n\n## Recommended Deep-Dive Order\n1. <contract> — focus on <vulnerability class>\n2. <contract> — focus on <vulnerability class>\n3. <contract> — focus on <vulnerability class>\n\n## Quick Wins Checklist\n- [ ] Reentrancy review\n- [ ] Access control review\n- [ ] Oracle manipulation review\n- [ ] Upgradeability review\n- [ ] Accounting invariant review\n\n---\nGenerated by Atlas Smart Contract Auditor.\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n```\n\n## Guardrails\n\nThis is a **triage and audit workflow**, not a guaranteed vulnerability finder. It helps prioritize manual review and produce better audit notes. Always verify candidate findings with a proof of concept before submission.\n\n## Get the Full Atlas Agent Suite\n\nThe full Atlas Bounty Ops workflow includes:\n\n- Contest monitoring for Code4rena, Sherlock, HackenProof\n- Target scoring and prioritization\n- Daily vulnerability pattern promotion\n- Finding writeup templates\n- Scheduled research briefings\n- Revenue ops and marketing agents\n\n👉 https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\nFile v1.0.0:README.md\n\n# Atlas Smart Contract Auditor\n\nFree lightweight smart contract audit and DeFi security triage skill from Atlas Agent Suite.\n\nUse it to map a Solidity/EVM target, prioritize vulnerability classes, and generate a structured first-pass smart contract audit report.\n\nKeywords: smart contract audit, DeFi audit, Solidity audit, EVM security, vulnerability scanner, bug bounty, Code4rena, Sherlock, HackenProof.\n\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\nConcierge install: https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\n\nFile v1.0.0:_meta.json\n\n{\n  \"ownerId\": \"kn781dbr70kzecrypxr3g90ckn85y6ma\",\n  \"slug\": \"atlas-smart-contract-auditor\",\n  \"version\": \"1.0.0\",\n  \"publishedAt\": 1777743175987\n}","readmeExcerpt":"Skill: Smart Contract Audit Workflow by Atlas Owner: n8gendegen Summary: Smart contract audit and DeFi security triage skill for Solidity, EVM protocols, bug bounty programs, Code4Arena, Sherlock, and HackenProof. Maps attack surf... Tags: atlas:1.0.5, audit:1.0.0, bug-bounty:1.0.5, defi:1.0.0, defi-audit:1.0.5, evm:1.0.0, evm-audit:1.0.5, latest:1.0.5, security:1.0.0, security-audit:1.0.5, smart-contract:1.0.0, smar","codeSnippets":[],"executableExamples":[{"language":"text","snippet":"HIGH PRIORITY\n- Reentrancy: external calls + state changes + callbacks\n- Access control: missing modifiers, wrong role assumptions, admin bypass\n- Oracle manipulation: stale price, TWAP manipulation, decimal mismatch, fallback oracle bugs\n- Accounting bugs: share price drift, rounding loss, fee math, collateral/debt mismatch\n- Liquidation bugs: bad health factor math, stale collateral values, griefable liquidation paths\n- Upgradeability bugs: unprotected initializer, storage collision, implementation takeover\n\nMEDIUM PRIORITY\n- Fee-on-transfer / rebasing token edge cases\n- ERC777 / callback-enabled token surprises\n- Sandwich / MEV-sensitive pricing\n- DOS via unbounded loops or griefable state\n- Signature replay / permit domain separator issues\n\nLOW PRIORITY BUT CHECK\n- Input validation gaps\n- Event/reporting mismatch\n- Gas griefing\n- Minor precision loss without exploitable value extraction"},{"language":"markdown","snippet":"## Contract: <Name>\n\n### External Calls / Reentrancy\n- [ ] External calls happen after state updates?\n- [ ] Reentrancy guard exists where callbacks are possible?\n- [ ] ERC777 / ERC721 receiver / flash loan callbacks considered?\n\n### Access Control\n- [ ] Privileged functions use correct modifier?\n- [ ] Timelock/owner/admin boundaries are clear?\n- [ ] Emergency functions cannot steal user funds?\n\n### Oracle / Pricing\n- [ ] Oracle freshness checked?\n- [ ] Decimal normalization correct?\n- [ ] Fallback oracle cannot be manipulated?\n- [ ] TWAP window long enough for protocol value at risk?\n\n### Accounting\n- [ ] Shares/assets conversion handles rounding direction correctly?\n- [ ] Fee calculations cannot drain or brick accounting?\n- [ ] Deposits/withdrawals preserve invariants?\n\n### Upgradeability\n- [ ] Initializers protected?\n- [ ] Storage layout compatible?\n- [ ] Implementation cannot be selfdestructed or hijacked?"},{"language":"markdown","snippet":"# Smart Contract Audit Triage: <Target>\n\n## Target Overview\n- Protocol type:\n- Chain(s):\n- Contracts in scope:\n- Highest-value assets:\n\n## Attack Surface Summary\n- External integrations:\n- Oracle dependencies:\n- Upgrade pattern:\n- Privileged roles:\n\n## Top Vulnerability Classes to Review\n1. [HIGH] <class> — <why this target is exposed>\n2. [HIGH] <class> — <why this target is exposed>\n3. [MEDIUM] <class> — <why this target is exposed>\n\n## Recommended Deep-Dive Order\n1. <contract> — focus on <vulnerability class>\n2. <contract> — focus on <vulnerability class>\n3. <contract> — focus on <vulnerability class>\n\n## Quick Wins Checklist\n- [ ] Reentrancy review\n- [ ] Access control review\n- [ ] Oracle manipulation review\n- [ ] Upgradeability review\n- [ ] Accounting invariant review\n\n---\nGenerated by Atlas Smart Contract Auditor.\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor"},{"language":"text","snippet":"HIGH PRIORITY\n- Reentrancy: external calls + state changes + callbacks\n- Access control: missing modifiers, wrong role assumptions, admin bypass\n- Oracle manipulation: stale price, TWAP manipulation, decimal mismatch, fallback oracle bugs\n- Accounting bugs: share price drift, rounding loss, fee math, collateral/debt mismatch\n- Liquidation bugs: bad health factor math, stale collateral values, griefable liquidation paths\n- Upgradeability bugs: unprotected initializer, storage collision, implementation takeover\n\nMEDIUM PRIORITY\n- Fee-on-transfer / rebasing token edge cases\n- ERC777 / callback-enabled token surprises\n- Sandwich / MEV-sensitive pricing\n- DOS via unbounded loops or griefable state\n- Signature replay / permit domain separator issues\n\nLOW PRIORITY BUT CHECK\n- Input validation gaps\n- Event/reporting mismatch\n- Gas griefing\n- Minor precision loss without exploitable value extraction"},{"language":"markdown","snippet":"## Contract: <Name>\n\n### External Calls / Reentrancy\n- [ ] External calls happen after state updates?\n- [ ] Reentrancy guard exists where callbacks are possible?\n- [ ] ERC777 / ERC721 receiver / flash loan callbacks considered?\n\n### Access Control\n- [ ] Privileged functions use correct modifier?\n- [ ] Timelock/owner/admin boundaries are clear?\n- [ ] Emergency functions cannot steal user funds?\n\n### Oracle / Pricing\n- [ ] Oracle freshness checked?\n- [ ] Decimal normalization correct?\n- [ ] Fallback oracle cannot be manipulated?\n- [ ] TWAP window long enough for protocol value at risk?\n\n### Accounting\n- [ ] Shares/assets conversion handles rounding direction correctly?\n- [ ] Fee calculations cannot drain or brick accounting?\n- [ ] Deposits/withdrawals preserve invariants?\n\n### Upgradeability\n- [ ] Initializers protected?\n- [ ] Storage layout compatible?\n- [ ] Implementation cannot be selfdestructed or hijacked?"},{"language":"markdown","snippet":"# Smart Contract Audit Triage: <Target>\n\n## Target Overview\n- Protocol type:\n- Chain(s):\n- Contracts in scope:\n- Highest-value assets:\n\n## Attack Surface Summary\n- External integrations:\n- Oracle dependencies:\n- Upgrade pattern:\n- Privileged roles:\n\n## Top Vulnerability Classes to Review\n1. [HIGH] <class> — <why this target is exposed>\n2. [HIGH] <class> — <why this target is exposed>\n3. [MEDIUM] <class> — <why this target is exposed>\n\n## Recommended Deep-Dive Order\n1. <contract> — focus on <vulnerability class>\n2. <contract> — focus on <vulnerability class>\n3. <contract> — focus on <vulnerability class>\n\n## Quick Wins Checklist\n- [ ] Reentrancy review\n- [ ] Access control review\n- [ ] Oracle manipulation review\n- [ ] Upgradeability review\n- [ ] Accounting invariant review\n\n---\nGenerated by Atlas Smart Contract Auditor.\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor"}],"parameters":null,"dependencies":[],"permissions":[],"extractedFiles":[{"path":"SKILL.md","content":"---\nname: Smart Contract Audit Workflow by Atlas\nslug: atlas-smart-contract-auditor\nversion: 1.0.5\ndescription: Smart contract audit and DeFi security triage skill for Solidity, EVM protocols, bug bounty programs, Code4Arena, Sherlock, and HackenProof. Maps attack surface, prioritizes vulnerabilities, and generates structured audit checklists and security reports. Use for smart contract review, DeFi protocol audit, Solidity vulnerability scanning, and bug bounty target triage.\nhomepage: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\nchangelog: \"Conversion SEO v1.0.5: exact-match smart contract audit title, DeFi audit keywords, star/download CTA, and paid ZIP funnel copy.\"\ntags:\n  - security\n  - audit\n  - smart-contract\n  - smart-contract-audit\n  - smart-contract-scanner\n  - defi\n  - defi-audit\n  - defi-security\n  - solidity\n  - solidity-audit\n  - solidity-vulnerability\n  - evm\n  - evm-audit\n  - vulnerability-scanner\n  - vulnerability-assessment\n  - bug-bounty\n  - bug-bounty-triage\n  - code4rena\n  - code4arena-audit\n  - sherlock\n  - sherlock-audit\n  - hackenproof\n  - hackenproof-bounty\n  - security-audit\n  - smart-contract-security\n  - defi-bounty\n  - reentrancy-checker\n  - oracle-manipulation\n  - access-control-review\n  - atlas\n  - latest\nmetadata:\n  AtlasAgentSuite:\n    tier: free\n    use_cases:\n      - smart contract audit triage\n      - DeFi protocol audit checklist\n      - Solidity vulnerability review\n      - EVM security research\n      - bug bounty target prioritization\n    upsells:\n      - \"Atlas Starter/Pro ZIP Packs ($49/$150): https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\"\n      - \"Concierge Install: https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\"\n---\n\n# Smart Contract Audit Workflow by Atlas\n\nA lightweight **smart contract audit workflow** and **DeFi audit checklist** skill for Solidity/EVM protocols, bug bounty hunters, Code4rena wardens, Sherlock auditors, and HackenProof researchers.\n\nUse this when you need a fast first-pass review of a DeFi protocol or smart contract scope before committing hours to a manual audit.\n\n## Search Keywords / Best Use Cases\n\n- paid security skill pack\n\n- smart contract audit workflow\n- smart contract audit checklist\n- smart contract audit template\n- smart contract security checklist\n- smart contract audit report template\n- DeFi audit workflow\n- DeFi audit template\n- DeFi security checklist\n- Solidity security checklist\n- Solidity audit report template\n- EVM audit checklist\n- paid smart contract audit pack\n- Atlas smart contract audit pack\n- Atlas security skill pack\n- Solidity audit template\n- DeFi audit checklist\n- bug bounty report template\n- Code4rena audit prep\n- Sherlock audit prep\n- HackenProof bounty workflow\n\n- smart contract audit\n- smart contract auditor\n- DeFi audit\n- DeFi securit"},{"path":"README.md","content":"# Atlas Smart Contract Auditor\n\nFree lightweight smart contract audit and DeFi security triage skill from Atlas Agent Suite.\n\nUse it to map a Solidity/EVM target, prioritize vulnerability classes, and generate a structured first-pass smart contract audit report.\n\nKeywords: smart contract audit, DeFi audit, Solidity audit, EVM security, vulnerability scanner, bug bounty, Code4rena, Sherlock, HackenProof.\n\nFull Atlas Agent Suite: https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor\nConcierge install: https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor"},{"path":"_meta.json","content":"{\n  \"ownerId\": \"kn781dbr70kzecrypxr3g90ckn85y6ma\",\n  \"slug\": \"atlas-smart-contract-auditor\",\n  \"version\": \"1.0.5\",\n  \"publishedAt\": 1779028574536\n}"},{"path":"skill-card.md","content":"## Description:\n\nSmart Contract Audit Workflow by Atlas helps agents triage Solidity/EVM and DeFi audit targets by mapping attack surfaces, prioritizing vulnerability classes, and generating structured audit checklists and reports.\n\nThis skill is ready for commercial/non-commercial use.\n\n## Publisher:\n\n[n8gendegen](https://clawhub.ai/user/n8gendegen)\n\n### License/Terms of Use:\n\nMIT-0\n\n## Use Case:\n\nExternal developers, auditors, and bug bounty researchers use this skill to perform first-pass smart contract audit triage, prioritize DeFi vulnerability classes, and produce structured audit notes before deeper manual review.\n\n### Deployment Geography for Use:\n\nGlobal\n\n## Known Risks and Mitigations:\n\nRisk: The generated audit report may include Atlas attribution and tracked promotional links.\n\nMitigation: Review the report footer before sharing externally and remove promotional attribution or tracked links when they are not appropriate.\n\nRisk: The workflow is a checklist aid and may surface candidate issues that are not validated vulnerabilities.\n\nMitigation: Manually verify findings and produce proof-of-concept evidence before submitting or relying on audit conclusions.\n\n## Reference(s):\n\n- [ClawHub skill page](https://clawhub.ai/n8gendegen/skills/atlas-smart-contract-auditor)\n- [Atlas Agent Suite skill page](https://atlasagentsuite.com/skills.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor)\n- [Atlas concierge install](https://atlasagentsuite.com/concierge.html?utm_source=clawhub&utm_medium=skill&utm_campaign=atlas-smart-contract-auditor)\n\n## Skill Output:\n\n**Output Type(s):** [Text, Markdown, Guidance]\n\n**Output Format:** [Markdown audit triage report and checklist guidance]\n\n**Output Parameters:** [1D]\n\n**Other Properties Related to Output:** [Produces a first-pass triage report with target overview, attack surface summary, vulnerability priorities, deep-dive order, and quick-win checklist.]\n\n## Skill Version(s):\n\n1.0.5 (source: server release evidence and skill frontmatter)\n\n## Ethical Considerations:\n\nUsers should evaluate whether this skill is appropriate for their environment, review any generated or modified files before relying on them, and apply their organization's safety, security, and compliance requirements before deployment."}],"languages":[],"docsSourceLabel":"CLAWHUB","editorialOverview":null,"editorialQuality":{"score":100,"threshold":65,"status":"thin","wordCount":1337,"uniquenessScore":37,"reasons":["uniqueness-below-45"]}},"media":{"evidence":{"source":"no-media","verified":false,"confidence":"low","updatedAt":"2026-10-11T13:46:35.959Z","emptyReason":"No screenshots, media assets, or demo links are available."},"primaryImageUrl":null,"mediaAssetCount":0,"assets":[],"demoUrl":null},"ownerResources":{"evidence":{"source":"unclaimed","verified":false,"confidence":"low","updatedAt":"2026-10-11T13:46:35.959Z","emptyReason":"This page has not been claimed by the agent owner."},"hasCustomPage":false,"customPageUpdatedAt":null,"customLinks":[],"structuredLinks":{"docsUrl":null,"demoUrl":null,"supportUrl":null,"pricingUrl":null,"statusUrl":null},"customPage":null},"relatedAgents":{"evidence":{"source":"protocol-neighbors","verified":false,"confidence":"medium","updatedAt":"2026-10-11T16:04:13.021Z","emptyReason":null},"items":[{"id":"8ebccd8e-3863-4187-8355-c3f14e1f9edf","entityType":"agent","canonicalPath":"/agent/iofficeai-aionui","slug":"iofficeai-aionui","name":"AionUi","description":"Free, local, open-source 24/7 Cowork app and OpenClaw for Gemini CLI, Claude Code, Codex, OpenCode, Qwen Code, Goose CLI, Auggie, and more | 🌟 Star if you like it!","url":"https://github.com/iOfficeAI/AionUi","homepage":"https://www.aionui.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-10-09T19:11:12.944Z","createdAt":"2026-02-25T03:38:16.584Z","downloads":null},{"id":"b917f68a-ebff-438e-84f8-3f4b2494c0bc","entityType":"agent","canonicalPath":"/agent/activepieces-activepieces","slug":"activepieces-activepieces","name":"activepieces","description":"AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents","url":"https://github.com/activepieces/activepieces","homepage":"https://www.activepieces.com","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-15T02:22:12.426Z","createdAt":"2026-02-25T03:38:12.412Z","downloads":null},{"id":"5cb26759-3a39-483f-94cf-276a98c13bb8","entityType":"agent","canonicalPath":"/agent/cherryhq-cherry-studio","slug":"cherryhq-cherry-studio","name":"cherry-studio","description":"AI productivity studio with smart chat, autonomous agents, and 300+ assistants. Unified access to frontier LLMs","url":"https://github.com/CherryHQ/cherry-studio","homepage":"https://cherry-ai.com","source":"GITHUB_REPOS","protocols":["MCP","OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-04-11T14:38:40.986Z","createdAt":"2026-02-25T03:38:19.379Z","downloads":null},{"id":"6f6582d0-5d76-4f0f-b81d-86520247950b","entityType":"agent","canonicalPath":"/agent/copilotkit-copilotkit","slug":"copilotkit-copilotkit","name":"CopilotKit","description":"The Frontend for Agents & Generative UI. React + Angular","url":"https://github.com/CopilotKit/CopilotKit","homepage":"https://docs.copilotkit.ai","source":"GITHUB_REPOS","protocols":["OPENCLAW"],"capabilities":[],"safetyScore":100,"overallRank":70,"updatedAt":"2026-03-25T09:50:57.846Z","createdAt":"2026-02-25T03:39:14.617Z","downloads":null}],"links":{"hub":"/agent","source":"/agent/source/clawhub","protocols":[{"label":"OpenClaw","href":"/agent/protocol/openclew"}]}}}