example-fork-detection
TEMPLATE — replace with the description of your rule. Should activate on the specific code patterns your fork has. Activate on `<your trigger keywords or…
Convention for streaming progress on long-running audit commands. Use during /audit, /audit-deep, /audit-strict, /simulate, /exploit-chain — anything taking >10 seconds.
$ npx -y skills add omermaksutii/RugProof --skill progress-and-streaming --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
/progress-and-streamingContext preview
The summary Claude sees to decide when to auto-load this skill.
Convention for streaming progress on long-running audit commands. Use during /audit, /audit-deep, /audit-strict, /simulate, /exploit-chain — anything taking >10 seconds.
name: progress-and-streaming description: Convention for streaming progress on long-running audit commands. Use during /audit, /audit-deep, /audit-strict, /simulate, /exploit-chain — anything taking >10 seconds.
Long audits with no output feel broken. This skill defines the contract for live updates.
Stream short status lines to stdout as work progresses. Each line should be self-contained — a user reading the third line shouldn't need the first two.
[1/5] Inventory scanning src/ for Solidity files [1/5] Inventory found 12 files (3,456 LoC), Solidity 0.8.24 [2/5] Skills running reentrancy, access-control, oracle-manipulation, … [2/5] Skills 18 skill checks complete (847ms) [3/5] Specialists dispatching: amm-specialist, attacker, defender (parallel) [3/5] Specialists amm-specialist: 3 findings [3/5] Specialists attacker: 5 findings (1 chain candidate) [3/5] Specialists defender: 2 missing-defense notes [4/5] Consolidate dedup + severity assignment [5/5] Report 12 findings, grade C → wrote rugproof-reports/audit-2026-05-13.md
If the user interrupts (Ctrl+C / Esc), emit:
[!] cancelled at stage [3/5]: dispatched specialists are still running, partial results saved to .rugproof/partial/
In a Claude Code slash-command context, this means: emit short text messages between tool calls. The user sees them streamed. Don't batch all updates into a final block.
Rugproof your code before someone else does. 🌐 Live site: omermaksutii.github.io/RugProof 📦 Latest: v1.0.0 — 45 commands · 23 agents · 45 skills · 13 MCP servers · tested, offline-first, with rule packs, a benchmark, non-EVM coverage, and post-deploy
Repo: omermaksutii/RugProof
TEMPLATE — replace with the description of your rule. Should activate on the specific code patterns your fork has. Activate on `<your trigger keywords or…
Detect unsafe assumptions about Solady's gas-optimized ERC20/ERC2612 permit and DN404 metadata. Solady's ERC20 uses custom storage slots, returns bools via…
Detect front-runnable ownership initialization in Solady Ownable / OwnableRoles. Solady's `_initializeOwner` is a guarded one-time setter (it reverts with…
Detect Solady SafeTransferLib calls that assume the token has code. SafeTransferLib.safeTransfer/safeTransferFrom/safeApprove deliberately skip the EXTCODESIZE…
Detect Uniswap V4 hooks that fail to settle currency deltas with the PoolManager. Every credit/debit a hook creates (BeforeSwapDelta, afterSwap hookDelta,…
Detect Uniswap V4 hooks whose address-encoded permission flags don't match the callbacks the hook actually implements. In V4 the hook's permissions live in the…