Skills defi-mev-battletest
📦

defi-mev-battletest

Content revision r1 High Risk ⚙️ External commands🌐 Network access

對 DeFi 和 MEV 機器人進行壓力測試

當回測忽略延遲、gas、reorg 和對抗性 orderflow 時,DeFi 和 MEV 機器人經常會失敗。此技能會引導進行真實的模擬、風險控制、AMM 數學,以及私有 bundle 提交。

Supports: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "defi-mev-battletest" from https://skillstore.io/skills/barissozen-defi-mev-battletest.md and its manifest at https://skillstore.io/api/skills/barissozen-defi-mev-battletest/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Test it

Using "defi-mev-battletest". 審查這個套利機器人,確認是否能在 mainnet 上線。

Expected outcome:

  • 主要風險:過期狀態、失敗交易、gas auction 損失、誘餌機會,以及缺少資金限制。
  • 必要測試:fork 模擬、pending block 模擬、bundle 模擬,以及一週的有限資金測試。
  • 啟動決策:在實作 kill switch 和虧損限制前先阻擋上線。

Using "defi-mev-battletest". 說明為什麼我獲利的回測可能在實盤失敗。

Expected outcome:

回測很可能使用已確認的歷史狀態、已知 gas 價格,且沒有 mempool 競爭。實盤執行需要納入延遲、滑價、reorg 和失敗假設。

Using "defi-mev-battletest". 比較 public RPC 和 private bundle submission 對我的機器人的差異。

Expected outcome:

Public RPC 會將 pending transactions 暴露給競爭者,並可能洩漏有利可圖的意圖。Private bundles 可降低曝光,但需要模擬、出價紀律和 inclusion handling。

Security Audit

High Risk
v8 • 7/5/2026 Open versioned report

The repeated Ruby backtick detections are false positives caused by Markdown code fences, not executable commands. The hardcoded URLs and gas-bidding snippets are instructional examples, but the skill contains dual-use MEV extraction guidance that could enable frontrunning, sandwiching, or hidden bidding. No prompt injection attempt was found.

1
Files scanned
933
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

High
Dual-Use MEV Extraction Guidance
The skill includes sandwich and frontrun triggers, MEV-Share strategy notes, backrunning examples, and private bid-hiding guidance. This can help build adversarial trading systems that extract value from users or avoid competitor visibility.
The cited lines explicitly reference sandwiching, frontrunning, backrunning, and hiding bids from competitors. The content is dual-use, but the harmful trading use case is directly described.
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/barissozen-defi-mev-battletest/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/barissozen-defi-mev-battletest/security.svg)](https://skillstore.io/skills/barissozen-defi-mev-battletest?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/barissozen-defi-mev-battletest?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barissozen-defi-mev-battletest/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/barissozen-defi-mev-battletest.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

BarisSozen. (2026). defi-mev-battletest security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barissozen-defi-mev-battletest/audits/8

BibTeX citation

@techreport{barissozen-barissozen-defi-mev-battletest-2026, author = {BarisSozen}, title = {defi-mev-battletest security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/barissozen-defi-mev-battletest/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "defi-mev-battletest security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "BarisSozen" date-released: "2026-07-05" url: "https://skillstore.io/skills/barissozen-defi-mev-battletest/audits/8" identifiers: - type: other value: "skillstore:barissozen-defi-mev-battletest:audit:8" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
72
Community
74
Spec Compliance

What You Can Build

上線前機器人審查

檢查 DeFi 機器人設計是否存在過期狀態、失敗交易、gas auctions,以及缺少 kill switches 的問題。

模擬計畫設計

在承擔資金風險前,建立真實的 fork、pending block 和 bundle 模擬。

MEV 風險簡報

總結 private orderflow、MEV-Share 和 AMM 機制如何影響執行風險。

Try These Prompts

審查機器人構想
I am planning a DeFi arbitrage bot for [markets]. Identify the main risks, assumptions, and tests before coding.
規劃真實回測
Design a simulation plan for my bot. Include fork tests, pending state checks, gas uncertainty, bait detection, and failure-rate assumptions.
評估 MEV 執行
Evaluate this MEV execution plan. Compare public RPC, protected RPC, MEV-Share, and Flashbots bundles for risk and operational requirements.
建立啟動門檻
Create a launch readiness checklist for my DeFi bot. Include kill switches, capital limits, monitoring, reorg handling, and rollback criteria.

Best Practices

  • 在提交真實交易前,針對 pending 或 forked state 進行模擬。
  • 在策略邏輯擴大前,先實作 kill switches、資金限制和告警。
  • 在扣除 gas、失敗率、reorg 風險、競爭和誘餌風險後計算預期價值。

Avoid

  • 因為歷史回測有獲利,就假設套利沒有風險。
  • 在未考慮 mempool exposure 的情況下,透過 public RPC 發送有利可圖的交易。
  • 在失敗處理、監控和 rollback paths 尚未存在前,就用真實資金上線。

Frequently Asked Questions

此技能會交易或移動資金嗎?
不會。它只提供指引和範例。使用者必須自行建置、測試和營運自己的系統。
它能保證 MEV 策略獲利嗎?
不會。它強調為什麼獲利回測在即時 gas、延遲和競爭下經常失敗。
它涵蓋 AMM 數學嗎?
會。它涵蓋價格衝擊、滑價、Uniswap V2、Uniswap V3 ticks、fee tiers 和 Curve-style 風險。
它包含生產環境風險控制嗎?
會。它涵蓋 kill switches、虧損限制、reorg handling、stale state checks、監控和啟動檢查清單。
這適合初學者嗎?
它可以幫助初學者理解風險,但假設使用者具備 DeFi、智慧合約和交易系統的基本知識。
它支援哪些工具?
報告列出支援 Claude、Codex 和 Claude Code。

Developer Details

Author

BarisSozen

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Ref

5ab1d37e83436c6eef84de88573e142b94f2a4ad

Maintenance freshness

7/20/2026

Usage

4 downloads · 314 views

File structure

📄 SKILL.md

More from BarisSozen

View all
View all