solady-erc20-permit2-a…
Detect unsafe assumptions about Solady's gas-optimized ERC20/ERC2612 permit and DN404 metadata. Solady's ERC20 uses custom…
TEMPLATE — replace with the description of your rule. Should activate on the specific code patterns your fork has. Activate on `<your trigger keywords or function names>`.
Claude Code
$ npx -y skills add omermaksutii/RugProof --skill example-fork-detection --agent claude-code
Codex
$ npx skills add omermaksutii/RugProof --skill example-fork-detection -a codex -y
Cursor
$ npx skills add omermaksutii/RugProof --skill example-fork-detection -a cursor -y
Gemini CLI
$ npx skills add omermaksutii/RugProof --skill example-fork-detection -a gemini-cli -y
GitHub Copilot
$ npx skills add omermaksutii/RugProof --skill example-fork-detection -a github-copilot -y
OpenCode
$ npx skills add omermaksutii/RugProof --skill example-fork-detection -a opencode -y
Windsurf
$ npx skills add omermaksutii/RugProof --skill example-fork-detection -a windsurf -y
name: example-fork-detection description: TEMPLATE — replace with the description of your rule. Should activate on the specific code patterns your fork has. Activate on `<your trigger keywords or function names>`.
This is a template for community-authored Rugproof skills. Replace every section.
Describe the specific situation. Be concrete:
For each pattern, give:
// example of the bug shape
function vulnerableThing() external {
// ...
}Followed by a one-paragraph explanation.
| Pattern | Severity | |---|---| | <pattern A> | **Critical** | | <pattern B> | **High** |
How to fix. Include code diffs where possible.
When does the pattern NOT indicate a bug?
Rugproof your code before someone else does. 🌐 Live site: omermaksutii.github.io/RugProof 📦 Latest: v1.0.0 — 45 commands · 23 agents · 45 skills · 13 MCP servers · tested, offline-first, with rule packs, a benchmark, non-EVM coverage, and post-deploy
Detect unsafe assumptions about Solady's gas-optimized ERC20/ERC2612 permit and DN404 metadata. Solady's ERC20 uses custom…
Detect front-runnable ownership initialization in Solady Ownable / OwnableRoles. Solady's `_initializeOwner` is a guarded…
Detect Solady SafeTransferLib calls that assume the token has code. SafeTransferLib.safeTransfer/safeTransferFrom/safeApprove…
Detect Uniswap V4 hooks that fail to settle currency deltas with the PoolManager. Every credit/debit a hook creates…
Detect Uniswap V4 hooks whose address-encoded permission flags don't match the callbacks the hook actually implements. In V4 the…
Detect reentrancy in Uniswap V4 hooks via the PoolManager unlock/lock callback. V4 uses a singleton PoolManager with transient…
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…