Skip to content

DeFi AMM Security Audit

Guides an agent through a checklist for auditing AMM smart contracts for common DeFi exploits

Repository
affaan-m/ECC
Stars
295,127
Licence
MIT
Files
1 file

What it does

Once installed, the agent gets a short checklist and a list of common vulnerability patterns for automated market maker (AMM) smart contracts, such as those used by decentralized exchanges like Uniswap, Curve, or Balancer. When asked to review such code, it looks for issues like flash-loan attacks, missing slippage protection, sandwich attacks, price manipulation via on-chain price lookups, reentrancy, and integer overflow. The skill is a guide written in Japanese; it contains no executable tools and does not fetch external data.

Great for

  • Developers reviewing or writing AMM or DeFi smart contracts who want a structured security checklist
  • Security reviewers wanting a quick reminder of common DeFi vulnerability classes before a deeper manual audit
  • Students learning how DeFi exploits such as flash-loan price manipulation work

Skip it if

  • Replacing a professional smart contract audit: the file is a brief checklist with no testing, tooling, or verification, so it can miss real bugs and give false confidence
  • Confirming a contract is safe to use with real funds: the skill only lists patterns and does not analyse specific code in depth

Try asking

  • “Review this Uniswap-style swap function for flash-loan and price manipulation risks”
  • “Check my liquidity pool contract against the AMM security checklist”
  • “What reentrancy protections should my token mint and burn logic have?”
Step-by-step guide: how to use DeFi AMM Security AuditInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    defi-amm-security.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip defi-amm-security.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip defi-amm-security.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Paste the full contract source and name the protocol type (for example, constant-product AMM) so the agent can check against the right assumptions.
  • Treat the output as a starting point and follow up with unit tests, fuzzing, and an independent professional audit before deploying.
  • The skill's content is in Japanese; ask for answers in English if you prefer, though the checklist itself is written in Japanese.

What's inside

  • SKILL.md

Redistributed unmodified from affaan-m/ECC under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.