Claude Marketplaces
SkillsMCP serversMarketplacesDigestTools
Submit

This week in Claude

Every Monday: Claude Code, Agent SDK, MCP, and the Anthropic platform moves worth your time.

Skills by category
Frontend DevelopmentBackend & APIsTesting & QASecurityDevOps & CI/CDGit & Pull RequestsDocumentationCode Review & QualityAI & Agent BuildingSkill Development
MCP servers by category
Sales & MarketingWeb & Browser AutomationDatabasesAI & LLM ToolsCloud & InfrastructureCommunication & MessagingDeveloper ToolsDesign & CreativeDocuments & KnowledgeSearch & Web Crawling
Marketplaces by category
AI Agents & OrchestrationLLM IntegrationDevelopment ToolsFrontend & UIBackend & APIsDatabasesTesting & Code QualityDevOps & CloudSecurity & ComplianceGit & Version Control
Claude Marketplaces

An independent directory of skills, plugins and MCP servers for Claude Code. Not affiliated with Anthropic.

Browse

  • Skills
  • MCP servers
  • Marketplaces
  • Weekly digest
  • Skill index
  • MCP index
  • Marketplace index

Site

  • About
  • Tools
  • Submit
  • Feedback
  • Privacy
  • llms.txt
  • Plugins reference

Maker

  • Agent Caffeine
  • knobs
  • Wax
  • Snug
  • mertduzgun.com
Made by mertduzgun.com
Skills/Backend & APIs
yaklang avatar

Defi Attack Patterns

yaklang/hack-skills

This is a comprehensive reference for understanding how DeFi protocols get exploited, covering everything from flash loan mechanics to MEV extraction and…

installs
3.5K
GitHub stars
2.5K
last updated
Aug 21, 2026
View on GitHubSave

Install

$ npx -y skills add yaklang/hack-skills --skill defi-attack-patterns --agent claude-code

Installs into .claude/skills of the current project.

Sponsors

CodeRabbitSponsoredTry For FreeLid closed, agents workingTry itOpen StepsSponsoredDownload for freeAppSignalSponsoredStart Free TrialKeep API keys from agentsGet SnugBlock apps on your iPhoneGet WaxDevtools for design engineersTry it livebelt - the only tool your agent needsSponsoredone prompt install

What it does

This is a comprehensive reference for understanding how DeFi protocols get exploited, covering everything from flash loan mechanics to MEV extraction and bridge vulnerabilities. Load it when you're auditing smart contracts, analyzing post-mortems of exploits, or building protocol defenses. The real value is in the specifics: it breaks down the exact atomicity constraints that make flash loans work, explains why spot price oracles are dangerous compared to TWAP, and walks through attack sequences like vault inflation and JIT liquidity. It won't write exploit code for you, but it will make you think like an attacker when reviewing lending protocols or AMM integrations.

Files

Select a file.

Details

Repository
github.com/yaklang/hack-skills
Categories
Backend & APIs, Finance & Trading, Web3 & Blockchain
First seen
Jun 3, 2026

More from yaklang/hack-skills

All 102
  • Network Protocol Attacks3.5K
  • Xslt Injection3.5K
  • Email Header Injection3.5K
  • Windows Av Evasion3.5K
  • Type Juggling3.5K
  • Memory Forensics Volatility3.5K
  • Linux Lateral Movement3.5K
  • Windows Privilege Escalation3.5K
  • Container Escape Techniques3.5K
  • Classical Cipher Analysis3.5K
  • Tunneling And Pivoting3.5K
  • Linux Security Bypass3.5K
  • Prototype Pollution Advanced3.5K
  • Smart Contract Vulnerabilities3.5K
  • Stack Overflow And Rop3.5K
  • Steganography Techniques3.5K
  • Lattice Crypto Attacks3.5K
  • Rsa Attack Techniques3.5K
  • Sandbox Escape Techniques3.5K
  • Windows Lateral Movement3.5K
  • Symmetric Cipher Attacks3.5K
  • Macos Security Bypass3.5K
  • Ntlm Relay Coercion3.4K
  • Macos Process Injection3.4K

Recommended

More Backend & APIs
1yaklang avatarwindows-av-evasionyaklang/hack-skillsAV/EDR evasion playbook for Windows. Use when bypassing AMSI, ETW, .NET assembly detection, shellcode execution, process injection, API hooking, and signature-b3.5Kinstalls
2yaklang avatartype-jugglingyaklang/hack-skillsPHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature checks, or token validation uses loose equality, numeric coercion, 3.5Kinstalls
3tradermonty avatarearnings-calendartradermonty/claude-trading-skillsThis skill retrieves upcoming earnings announcements for US stocks using the Financial Modeling Prep (FMP) API. Use this when the user requests earnings calenda3.5Kinstalls
4yaklang avatarprototype-pollution-advancedyaklang/hack-skillsAdvanced prototype pollution playbook — server-side RCE, client-side gadgets, filter bypasses, and detection techniques. Companion to ../prototype-pollution/ fo3.5Kinstalls
5openai avatarspeechopenai/skillsUse when the user asks for text-to-speech narration or voiceover, accessibility reads, audio prompts, or batch speech generation via the OpenAI Audio API; run t3.5Kinstalls
6tradermonty avatarsector-analysttradermonty/claude-trading-skillsThis skill should be used when analyzing sector rotation patterns and market cycle positioning. It fetches sector uptrend data from CSV (no API key required) an3.5Kinstalls