scan-web
Run the full web SAST pipeline (phases 01-06) against this repository
A command is the one you type. It runs exactly when you ask it to, and never before.
98 commands across 241 plugins.
Run the full web SAST pipeline (phases 01-06) against this repository
Generate a disclosure report from the current finding. Auto-detects the best submission channel. Usage: /report (run from target directory with confirmed…
Audit a deployed contract on a live chain. Pulls verified source from the block explorer, optionally forks the chain for live-state simulation.
Diff the on-chain configuration of one contract deployed across multiple chains — owner, oracle, fees, timelock, pause state, proxy impl — and flag the chain…
Multi-pass consensus audit — runs the audit twice with different prompts, only reports consensus findings. Aggressively cuts false positives.
Generate a responsible-disclosure bounty submission from a confirmed finding — Immunefi / protocol bounty / SEAL 911 formats.
Submit a finding to a bug-bounty platform (Immunefi, Cantina) automatically.
Generate a shareable PNG audit card from the latest /audit. Optimized for social media.
Run forge coverage, identify untested branches, generate tests to close gaps.
Run Rugproof against the bundled vulnerable example contracts — first-run "wow moment".
Diff the contract against a canonical reference implementation (OZ, Solady, Uniswap V3, etc.) and flag suspicious deltas.
Mark a finding as a false positive (or accepted risk). Future audits won't re-report it.
Explain a finding in plain English, with examples. Optionally tailored to a beginner audience.
Generate a working Foundry PoC that exploits a specific finding. Compiles and passes.
Chain multiple findings into a single multi-step exploit. Produces a Foundry test that proves the chain works.
Generate an exploit against a *deployed* contract on a fork. Validates the exploit works on live state.
Gas profile — find expensive operations and suggest optimizations with before/after numbers.
Generate Foundry invariant tests for property-based fuzzing. The high-value command for serious teams.
Mint a soulbound Audit Certificate NFT on Berachain (or other supported chain) for a completed audit.
Set up post-deployment monitoring — recommend which on-chain events to alert on and scan recent activity for high-severity changes.
Run Mythril (symbolic execution) and have Claude triage its findings — turn symbolic counter-examples into Foundry PoCs.
Post the latest /audit results to a Discord channel via webhook.
Post the latest /audit results to a Slack channel via incoming webhook.
Interactive pre-launch security checklist — walk the operational and code-safety gates and produce a final GO / NO-GO with each item PASS / FAIL / N-A.
Formal verification entrypoint — prove a property holds for all inputs with Halmos (symbolic, offline) or Certora (CVL) using ready-made property templates.
Fast pre-commit-grade scan. Only catches Critical and High. Optimized for hooks.
Generate code patches that fix one or more findings. Outputs as a unified diff and (optionally) applies it.
Replay a historical exploit tx (by tx hash) on a fork. Explains step-by-step what the attacker did.
Render the latest audit as a deliverable report in Markdown / HTML / PDF / JSON / PNG.
Fast owner-power / rugability scan — score how much unilateral control the deployer holds and return a 0-100 rug-risk verdict.
60-second onboarding — set up .rugproof.yml, choose severity profile, configure hooks, pick supported chains.
Compute a Rugproof grade (A+ → F) for the contract or repo based on findings from /audit.
Multi-actor, multi-block simulation against a live fork. Stateful attack sequences across many txs.
Run Slither and have Claude triage its findings — separate true positives from false positives, write PoCs for real bugs.
Symbolic execution via Halmos. For paths that fuzzing cannot reach.
Generate a Foundry test suite — happy path + edge cases + adversarial tests — for a contract or function.
Compose a tweet from the latest audit. Either auto-posts (if Twitter API creds set) or generates a one-click intent URL.
Check storage compatibility, initializer changes, and admin-function deltas between two implementations of an upgradeable contract.
© 2026 Flowy · Free and open source
Built for Claude Code · Not affiliated with Anthropic