Claude Marketplaces
SkillsMCP serversMarketplacesDigestTools
Submit

This week in Claude

Every Monday: Claude Code, Agent SDK, MCP, and the Anthropic platform moves worth your time.

Skills by category
Frontend DevelopmentBackend & APIsTesting & QASecurityDevOps & CI/CDGit & Pull RequestsDocumentationCode Review & QualityAI & Agent BuildingSkill Development
MCP servers by category
Sales & MarketingWeb & Browser AutomationDatabasesAI & LLM ToolsCloud & InfrastructureCommunication & MessagingDeveloper ToolsDesign & CreativeDocuments & KnowledgeSearch & Web Crawling
Marketplaces by category
AI Agents & OrchestrationLLM IntegrationDevelopment ToolsFrontend & UIBackend & APIsDatabasesTesting & Code QualityDevOps & CloudSecurity & ComplianceGit & Version Control
Claude Marketplaces

An independent directory of skills, plugins and MCP servers for Claude Code. Not affiliated with Anthropic.

Browse

  • Skills
  • MCP servers
  • Marketplaces
  • Weekly digest
  • Skill index
  • MCP index
  • Marketplace index

Site

  • About
  • Tools
  • Submit
  • Feedback
  • Privacy
  • llms.txt
  • Plugins reference

Maker

  • Agent Caffeine
  • knobs
  • Wax
  • Snug
  • mertduzgun.com
Made by mertduzgun.com
Skills/Security
yaklang avatar

Smart Contract Vulnerabilities

yaklang/hack-skills

Load this when you're auditing Solidity contracts and need to systematically check for the stuff that drains wallets.

installs
3.5K
GitHub stars
2.5K
last updated
Aug 21, 2026
View on GitHubSave

Install

$ npx -y skills add yaklang/hack-skills --skill smart-contract-vulnerabilities --agent claude-code

Installs into .claude/skills of the current project.

Sponsors

CodeRabbitSponsoredTry For FreeLid closed, agents workingTry itOpen StepsSponsoredDownload for freeAppSignalSponsoredStart Free TrialKeep API keys from agentsGet SnugBlock apps on your iPhoneGet WaxDevtools for design engineersTry it livebelt - the only tool your agent needsSponsoredone prompt install

What it does

It covers the classics like reentrancy (including the subtle cross-contract and read-only variants that trip up auditors), integer overflow patterns that still bite in unchecked blocks, and delegatecall storage collisions in proxy patterns. The tables comparing vulnerable vs safe patterns are practical, especially for MEV sandwich attacks and signature replay across chains. It's opinionated about what base models miss, like cross-function reentrancy and CREATE2 exploitation. If you're writing contracts instead of breaking them, the mitigation tables work as a hardening checklist.

Files

Select a file.

Details

Repository
github.com/yaklang/hack-skills
Categories
Security, Web3 & Blockchain
First seen
Jun 3, 2026

More from yaklang/hack-skills

All 102
  • Stack Overflow And Rop3.5K
  • Steganography Techniques3.5K
  • Lattice Crypto Attacks3.5K
  • Rsa Attack Techniques3.5K
  • Sandbox Escape Techniques3.5K
  • Windows Lateral Movement3.5K
  • Symmetric Cipher Attacks3.5K
  • Macos Security Bypass3.5K
  • Ntlm Relay Coercion3.4K
  • Macos Process Injection3.4K
  • Nosql Injection3.4K
  • Upload Insecure Files3.4K
  • Unauthorized Access Common Services3.4K
  • Reverse Shell Techniques3.4K
  • Ghost Bits Cast Attack3.2K
  • Hack4.3K
  • Android Pentesting Tricks4K
  • Sqli Sql Injection4K
  • Code Obfuscation Deobfuscation4K
  • Recon And Methodology3.9K
  • Xss Cross Site Scripting3.9K
  • Api Sec3.9K
  • Business Logic Vulnerabilities3.8K
  • Ssrf Server Side Request Forgery3.8K

Recommended

More Security
1yaklang avatarntlm-relay-coercionyaklang/hack-skillsNTLM relay and authentication coercion playbook. Use when capturing and relaying NTLM authentication to escalate privileges via SMB, LDAP, HTTP, or MSSQL relay 3.4Kinstalls
2minimax-ai avatarfullstack-devminimax-ai/skillsFull-stack backend architecture and frontend-backend integration guide. TRIGGER when: building a full-stack app, creating REST API with frontend, scaffolding ba3.4Kinstalls
3yaklang avatarunauthorized-access-common-servicesyaklang/hack-skillsUnauthorized access playbook for common exposed services. Use when Redis, Rsync, PHP-FPM, AJP/Ghostcat, Hadoop YARN, H2 Console, or similar management interface3.4Kinstalls
4workos avatarworkosworkos/skillsUse when the user asks for a WorkOS docs URL, term, or dashboard field (Sign-in endpoint, initiate_login_uri, Redirect URI, `WORKOS_*` env vars), or is implemen3.3Kinstalls
5giuseppe-trisciuoglio avataraws-cdkgiuseppe-trisciuoglio/developer-kitProvides AWS CDK TypeScript patterns for defining, validating, and deploying AWS infrastructure as code. Use when creating CDK apps, stacks, and reusable constr3.3Kinstalls
6huggingface avatarhf-clihuggingface/skillsHugging Face Hub CLI (`hf`) for downloading, uploading, and managing models, datasets, spaces, buckets, repos, papers, jobs, and more on the Hugging Face Hub. U3.3Kinstalls