المهارات defi-protocol-templates
📦

defi-protocol-templates

مراجعة المحتوى r2 مخاطر عالية ⚡ يحتوي على سكربتات⚙️ الأوامر الخارجية

Criar Modelos de Protocolos DeFi

Equipes de DeFi precisam de pontos de partida repetíveis para smart contracts. Esta skill fornece ao Claude, Codex e Claude Code modelos para staking, AMMs, governança, empréstimos e flash loans.

يدعم: Claude Codex Code(CC)
⚠️ 38 ضعيف

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل
Review the Skillstore skill "defi-protocol-templates" from https://skillstore.io/skills/sickn33-defi-protocol-templates.md and its manifest at https://skillstore.io/api/skills/sickn33-defi-protocol-templates/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

اختبرها

جارٍ استخدام "defi-protocol-templates". Projete um contrato de recompensas de staking para um token de governança.

النتيجة المتوقعة:

  • Um fluxo de staking com depósitos, saques, contabilização de recompensas e etapas de reivindicação.
  • Uma lista de controles de acesso, proteções contra reentrância e perguntas de auditoria.
  • Uma checklist de testes para matemática de recompensas, casos extremos e comportamento de emergência.

جارٍ استخدام "defi-protocol-templates". Compare modelos de AMM e empréstimos para um novo produto DeFi.

النتيجة المتوقعة:

  • Uma comparação lado a lado de necessidades de liquidez, exposição a riscos e ações do usuário.
  • Modelo inicial recomendado com base nos objetivos do produto e nas restrições operacionais.
  • Perguntas em aberto sobre design de oráculos, regras de colateral e premissas de mercado.

جارٍ استخدام "defi-protocol-templates". Prepare uma revisão de integração de flash loan.

النتيجة المتوقعة:

  • Uma checklist de revisão para callbacks, verificações de reembolso, taxas e validação do receptor.
  • Cenários de ameaça cobrindo falha de reembolso, receptores maliciosos e chamadas externas.
  • Testes sugeridos para limites de liquidez, arredondamento de taxas e reversão de transações.

التدقيق الأمني

مخاطر عالية

All 26 static findings are false positives caused by Solidity require statements and Markdown backticks, not dynamic loading, command execution, or reconnaissance. Semantic review found exploitable token-handling and receiver-authorization flaws, missing slippage protections, and a broken flash-loan repayment flow in examples described as production-ready.

1
الملفات التي تم فحصها
475
الأسطر التي تم تحليلها
0
عناصر المراجعة
0
تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (5)

مرتفع
Unauthenticated Flash-Loan Callback Grants Token Allowance
The receiver accepts calls from any address and approves that caller to spend the requested asset. An attacker can request an allowance and drain held tokens.
The callback has no caller or asset validation and directly approves msg.sender for amount plus fee. This creates a clear unauthorized-spending path.
مرتفع
Unsafe ERC20 Transfer and Accounting Assumptions
Several contracts ignore ERC20 return values and update accounting from requested amounts. Failed or fee-charging transfers can create unbacked balances, shares, or payouts.
The examples call transfer and transferFrom without SafeERC20 or return checks, while state changes use nominal inputs. Nonstandard ERC20 behavior makes the accounting unsafe.
مرتفع
AMM Omits User Slippage and Deadline Controls
Liquidity and swap functions accept no minimum return or deadline. Users cannot constrain adverse price movement, enabling sandwich losses and stale execution.
The public AMM methods expose only amounts and token selection. No minimum shares, minimum output, maximum input, or transaction deadline is enforced.
متوسط
Flash-Loan Repayment Flow Is Inconsistent
The receiver grants an allowance, but the provider never pulls repayment. The sample receiver therefore leaves the provider balance unchanged and positive-fee loans revert.
The provider only checks its final balance, while the receiver only calls approve. No transferFrom or direct repayment connects those operations.
متوسط
Unaudited Examples Are Presented as Production-Ready
The skill calls these templates production-ready despite exploitable authorization and token-accounting flaws. This claim may encourage unsafe deployment without required hardening.
The production-ready claim is explicit, while the document itself recommends testing and professional audits and contains concrete exploitable flaws.
شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار
تقييم الأمان

نسخ رابط التقرير

https://skillstore.io/skills/sickn33-defi-protocol-templates/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-defi-protocol-templates/security.svg)](https://skillstore.io/skills/sickn33-defi-protocol-templates?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/sickn33-defi-protocol-templates?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-defi-protocol-templates/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/sickn33-defi-protocol-templates.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

sickn33. (2026). defi-protocol-templates security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-defi-protocol-templates/audits/5

اقتباس BibTeX

@techreport{sickn33-sickn33-defi-protocol-templates-2026, author = {sickn33}, title = {defi-protocol-templates security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-defi-protocol-templates/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "defi-protocol-templates security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-07-23" url: "https://skillstore.io/skills/sickn33-defi-protocol-templates/audits/5" identifiers: - type: other value: "skillstore:sickn33-defi-protocol-templates:audit:5" description: "Skillstore immutable audit report identifier"

مقارنة المتغيرات

2 متغيرات قابلة للتثبيت

تبقى مهارة كل مؤلف عنصراً مستقلاً قابلاً للتثبيت. يُرتب المتغير الموصى به وفق أدلة Skillstore.

سبب تصدر هذا المتغير

أعلى تقييم في Skillstore
wshobson موصى به

wshobson-defi-protocol-templates

تقييم Skillstore 71
موثوقية الأدلة مرتفع
استخدام Skillstore 16
تم التحديث

2026-09-09

sickn33 الحالي

sickn33-defi-protocol-templates

تقييم Skillstore 38
موثوقية الأدلة متوسط
استخدام Skillstore 12
تم التحديث

2026-09-09

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط
55
الهندسة المعمارية
85
قابلية الصيانة
87
المحتوى
68
المجتمع
83
الامتثال للمواصفات

ما الذي يمكنك بناؤه

Inicializar um MVP de Protocolo

Comece com modelos de staking, AMM, governança, empréstimos ou flash loans antes de adicionar os requisitos do projeto.

Comparar Blocos de Construção DeFi

Revise padrões comuns de protocolo antes de selecionar uma arquitetura para um novo produto.

Planejar Revisões de Segurança

Use os modelos para identificar premissas, chamadas externas e pontos de verificação de auditoria.

جرّب هذه الموجّهات

Escolher um Modelo
Ajude-me a escolher o modelo de protocolo DeFi certo para meu projeto. Meu objetivo é [goal], meu tipo de token é [token] e a principal ação do usuário é [action].
Adaptar um Design de Staking
Crie um design de recompensas de staking usando esta skill. Inclua cronograma de recompensas, regras de saque, controles administrativos e verificações de segurança para [token name].
Revisar um Fluxo de AMM
Revise meu design de AMM em relação ao modelo. Verifique emissão de liquidez, matemática de swaps, atualizações de reservas, tratamento de taxas e premissas de slippage.
Criar um Plano de Auditoria
Crie um plano de revisão de segurança para um protocolo DeFi com base nestes modelos. Cubra modelos de ameaça, testes, invariantes e perguntas de auditoria.

أفضل الممارسات

  • Trate os modelos como pontos de partida e documente cada premissa específica do protocolo.
  • Adicione testes unitários, testes fuzz, testes de invariantes e verificações de implantação antes do lançamento.
  • Use bibliotecas revisadas e agende uma auditoria independente para contratos de produção.

تجنب

  • Não implante contratos gerados sem testes, auditorias e revisão de parâmetros.
  • Não copie lógica financeira sem adaptar casas decimais de tokens, taxas e premissas de oráculos.
  • Não ignore riscos de chamadas externas, poderes administrativos ou controles de emergência.

الأسئلة المتكررة

Quais protocolos esta skill cobre?
Cobre recompensas de staking, AMMs, tokens de governança, conceitos de empréstimos e fluxos de flash loan.
Posso implantar os modelos diretamente?
Não. Trate-os como pontos de partida que precisam de testes, revisão e uma auditoria profissional.
Ela inclui scaffolding completo de projeto?
Não. A skill fornece modelos e orientação, não suítes de testes completas nem ferramentas de implantação.
Quais ferramentas de IA podem usá-la?
Os metadados listam Claude, Codex e Claude Code como ferramentas compatíveis.
Isso é útil para revisores de segurança?
Sim. Revisores podem usar os exemplos para identificar premissas e criar checklists de auditoria.
Ela lida com risco de protocolos em produção?
Não. Você deve avaliar risco de mercado, risco de governança, risco de oráculos e controles operacionais separadamente.

تفاصيل المطور

المؤلف

sickn33

الترخيص

MIT

مراجعة Skillstore

r2

تنبيه الإصدار

لم يعلن المؤلف عن إصدار.

مرجع

f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526

حداثة الصيانة

٢٦‏/٧‏/٢٠٢٦

الاستخدام

8 تنزيلات · 99 مشاهدات

بنية الملفات

📄 SKILL.md

المزيد من sickn33

عرض الكل
عرض الكل