Skills defi-expert

📦

defi-expert

Name: defi-expert
Author: BarisSozen

Content revision r1 Safe ⚙️ External commands

Review DeFi Protocol Integrations

DeFi integrations often fail because token units, decimals, and protocol formats are easy to mix up. This skill guides Claude, Codex, and Claude Code through checks for safer protocol code.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "defi-expert" from https://skillstore.io/skills/barissozen-defi-expert.md and its manifest at https://skillstore.io/api/skills/barissozen-defi-expert/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/barissozen-defi-expert.md Signed manifest GET /api/skills/barissozen-defi-expert/manifest Signed lockfile GET /api/skills/barissozen-defi-expert/lockfile

Test it

Using "defi-expert". Review a USDC swap integration that uses 18 decimals for every token.

Expected outcome:

The review flags USDC as a 6-decimal token and recommends asset-specific parsing. It also asks for checksummed addresses and slippage basis point validation.

Using "defi-expert". Debug an Aave health factor display that divides the raw value by one quintillion.

Expected outcome:

The response explains that Aave rates commonly use ray precision. It recommends using the correct 27-decimal scaling before displaying the health factor.

Using "defi-expert". Prepare a checklist for adding a Balancer pool integration.

Expected outcome:

Confirm token decimals for every pool asset.
Verify amount units expected by each contract call.
Validate addresses and pool identifiers before implementation.

Security Audit

Safe

v9 • 7/6/2026 Open versioned report

The only static finding is a false positive from a TypeScript Markdown code fence in SKILL.md. The skill is prompt-only and provides DeFi integration guidance without executable code or prompt injection content.

Files scanned

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (1)

SKILL.md:59-68

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/barissozen-defi-expert/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/barissozen-defi-expert/security.svg)](https://skillstore.io/skills/barissozen-defi-expert?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/barissozen-defi-expert?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barissozen-defi-expert/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/barissozen-defi-expert.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

BarisSozen. (2026). defi-expert security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barissozen-defi-expert/audits/9

BibTeX citation

@techreport{barissozen-barissozen-defi-expert-2026,
  author = {BarisSozen},
  title = {defi-expert security audit report (audit version 9)},
  institution = {Skillstore},
  year = {2026},
  number = {9},
  url = {https://skillstore.io/skills/barissozen-defi-expert/audits/9},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "defi-expert security audit report (audit version 9)"
version: "unspecified"
type: report
authors:
  - name: "BarisSozen"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/barissozen-defi-expert/audits/9"
identifiers:
  - type: other
    value: "skillstore:barissozen-defi-expert:audit:9"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Prepare a protocol integration

Check required units, token decimals, and address handling before implementing a DeFi adapter.

Review amount handling bugs

Find likely precision errors when balances, health factors, rates, or swap amounts look incorrect.

Validate integration requirements

Build a checklist of data formats and protocol assumptions before assigning implementation work.

Try These Prompts

Check Token Units

Review this DeFi task for token decimal and denomination risks. Protocol: [protocol]. Assets: [assets]. Planned operation: [operation].

Review Amount Parsing

Inspect this amount handling logic for DeFi precision mistakes. Explain any decimal, wei, ray, wad, or basis point issues in plain language.

Debug Protocol Values

Help debug this DeFi value mismatch. Expected result: [expected]. Actual result: [actual]. Protocol fields and raw values: [details].

Design Integration Checklist

Create a DeFi integration checklist for [protocol] and [operation]. Include token decimals, denominations, address validation, API structures, and failure cases.

Best Practices

Provide the target protocol, assets, and operation before asking for review.
Include raw values and expected display values when debugging precision issues.
Verify token decimals from trusted sources before final implementation.

Avoid

Do not assume every ERC-20 token uses 18 decimals.
Do not mix wei, ray, wad, and basis points without explicit conversion.
Do not treat this skill as a substitute for a full security audit.

Frequently Asked Questions

What protocols does this skill focus on?

It focuses on Aave, Compound, Uniswap, Curve, Balancer, and common DeFi operations such as swaps, liquidations, and flash loans.

Can it verify live token decimals?

No. It reminds users to verify decimals and can reason from provided data, but it does not fetch live metadata by itself.

Does it write smart contracts?

It can guide protocol integration code, but it mainly reviews formats, units, and assumptions around DeFi logic.

Can it replace a DeFi security audit?

No. It helps catch common integration mistakes, but formal audit work requires broader testing and expert review.

Why does it mention Claude, Codex, and Claude Code?

The skill is designed for AI coding assistants that help developers plan, review, and debug DeFi integration work.

What information should I provide?

Provide the protocol, assets, token decimals if known, raw values, expected outputs, and the relevant code or integration plan.

Developer Details

Author

BarisSozen

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/BarisSozen/claude/tree/main/.claude/skills/defi-expert

Ref

c4231f0153ccd2a2ed62274c5a372bf8f2386d3f

Maintenance freshness

7/20/2026

Usage

5 downloads · 190 views

File structure

📄 SKILL.md