opencode-skills-collection 4.1.2 → 4.1.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of opencode-skills-collection might be problematic. Click here for more details.
- package/bundled-skills/.antigravity-install-manifest.json +31 -1
- package/bundled-skills/ai-agent-evaluation-benchmarking/SKILL.md +124 -0
- package/bundled-skills/ai-agent-tool-routing/SKILL.md +136 -0
- package/bundled-skills/ai-code-generation-guardrails/SKILL.md +142 -0
- package/bundled-skills/ai-prompt-regression-testing/SKILL.md +130 -0
- package/bundled-skills/antigravity-maintainer-batch-release/SKILL.md +26 -8
- package/bundled-skills/cline-pilot/README.md +138 -0
- package/bundled-skills/cline-pilot/SKILL.md +301 -0
- package/bundled-skills/cline-pilot/assets/global-memory-bank-prompt.en.md +66 -0
- package/bundled-skills/cline-pilot/assets/global-memory-bank-prompt.md +56 -0
- package/bundled-skills/cline-pilot/references/cold-start.md +58 -0
- package/bundled-skills/cline-pilot/references/decision-log.example.md +9 -0
- package/bundled-skills/cline-pilot/references/local-config.example.md +26 -0
- package/bundled-skills/cline-pilot/references/project-profiles.example.md +10 -0
- package/bundled-skills/cline-pilot/scripts/session_report.py +151 -0
- package/bundled-skills/cross-chain-relayer-audit/SKILL.md +136 -0
- package/bundled-skills/deep-research-framework/SKILL.md +81 -0
- package/bundled-skills/defi-yield-strategy-allocator/SKILL.md +124 -0
- package/bundled-skills/dropthehassle-publish/SKILL.md +151 -0
- package/bundled-skills/five-axis-code-review/SKILL.md +78 -0
- package/bundled-skills/git-commit-message/SKILL.md +76 -0
- package/bundled-skills/idea-to-blueprint/LICENSE +21 -0
- package/bundled-skills/idea-to-blueprint/SKILL.md +260 -0
- package/bundled-skills/idea-to-blueprint/assets/AGENTS.md.template +38 -0
- package/bundled-skills/idea-to-blueprint/assets/CLAUDE.md.template +38 -0
- package/bundled-skills/idea-to-blueprint/assets/DECISIONS.md.template +14 -0
- package/bundled-skills/idea-to-blueprint/assets/PROGRESS.md.template +47 -0
- package/bundled-skills/idea-to-blueprint/assets/session-prompt.md +23 -0
- package/bundled-skills/idea-to-blueprint/references/architecture-decisions.md +202 -0
- package/bundled-skills/idea-to-blueprint/references/blueprint-template.md +259 -0
- package/bundled-skills/idea-to-blueprint/references/code-quality-and-review.md +216 -0
- package/bundled-skills/idea-to-blueprint/references/design-minimal.md +96 -0
- package/bundled-skills/idea-to-blueprint/references/edge-case-catalog.md +239 -0
- package/bundled-skills/idea-to-blueprint/references/intake-questions.md +105 -0
- package/bundled-skills/idea-to-blueprint/references/research-protocol.md +196 -0
- package/bundled-skills/idea-to-blueprint/references/session-protocol.md +133 -0
- package/bundled-skills/idea-to-blueprint/references/stories-ac-tests.md +194 -0
- package/bundled-skills/idea-to-blueprint/references/ux-writing-guide.md +128 -0
- package/bundled-skills/idea-to-blueprint/scripts/lint_blueprint.py +460 -0
- package/bundled-skills/liuguang-banlan-ui/SKILL.md +22 -18
- package/bundled-skills/liuguang-banlan-ui/assets/starter/launcher.css +2 -2
- package/bundled-skills/liuguang-banlan-ui/assets/starter/obsidian/index.html +5 -4
- package/bundled-skills/liuguang-banlan-ui/assets/starter/obsidian/theme-config.js +3 -10
- package/bundled-skills/liuguang-banlan-ui/assets/starter/obsidian/theme.css +48 -62
- package/bundled-skills/liuguang-banlan-ui/assets/starter/opal/index.html +5 -4
- package/bundled-skills/liuguang-banlan-ui/assets/starter/opal/theme-config.js +27 -35
- package/bundled-skills/liuguang-banlan-ui/assets/starter/opal/theme.css +48 -62
- package/bundled-skills/liuguang-banlan-ui/assets/starter/shared/spectral-field.js +135 -148
- package/bundled-skills/liuguang-banlan-ui/references/style-contract.md +26 -7
- package/bundled-skills/liuguang-banlan-ui/references/verification.md +19 -7
- package/bundled-skills/liuguang-banlan-ui/scripts/measure_preview.py +78 -47
- package/bundled-skills/liuguang-banlan-ui/scripts/serve_preview.py +35 -0
- package/bundled-skills/liuguang-banlan-ui/scripts/validate_manifest.py +34 -3
- package/bundled-skills/liuguang-banlan-ui/tests/test_measure_preview.py +119 -0
- package/bundled-skills/liuguang-banlan-ui/tests/test_serve_preview.py +38 -0
- package/bundled-skills/liuguang-banlan-ui/tests/test_validate_manifest.py +73 -0
- package/bundled-skills/loki-mode/examples/todo-app-generated/frontend/package-lock.json +12 -12
- package/bundled-skills/loki-mode/examples/todo-app-generated/frontend/package.json +1 -1
- package/bundled-skills/meeting-notes/SKILL.md +80 -0
- package/bundled-skills/repo-foundation/SKILL.md +166 -0
- package/bundled-skills/repo-foundation/references/LICENSE.md +21 -0
- package/bundled-skills/repo-foundation/references/bootstrap.md +63 -0
- package/bundled-skills/repo-foundation/references/companion.md +9 -0
- package/bundled-skills/repo-foundation/references/continuity.md +50 -0
- package/bundled-skills/repo-foundation/references/evolution.md +60 -0
- package/bundled-skills/repo-foundation/references/migration-examples.md +53 -0
- package/bundled-skills/repo-foundation/references/shared-contracts.md +48 -0
- package/bundled-skills/repo-foundation/references/verification.md +50 -0
- package/bundled-skills/repo-native-refactor/SKILL.md +225 -0
- package/bundled-skills/repo-native-refactor/references/LICENSE.md +21 -0
- package/bundled-skills/repo-native-refactor/references/deterministic-tooling.md +101 -0
- package/bundled-skills/repo-native-refactor/references/error-reliability.md +117 -0
- package/bundled-skills/repo-native-refactor/references/finding-taxonomy.md +181 -0
- package/bundled-skills/repo-native-refactor/references/refactor-examples.md +77 -0
- package/bundled-skills/repo-native-refactor/references/repository-prose.md +157 -0
- package/bundled-skills/repo-native-refactor/references/repository-rehabilitation.md +94 -0
- package/bundled-skills/repo-native-refactor/references/semantic-risk.md +187 -0
- package/bundled-skills/repo-native-refactor/references/shared-contracts.md +48 -0
- package/bundled-skills/repo-native-refactor/references/testing-integrity.md +103 -0
- package/bundled-skills/smart-contract-formal-verification/SKILL.md +136 -0
- package/bundled-skills/smart-contract-upgrade-governance/SKILL.md +130 -0
- package/bundled-skills/soroban-contract-audit/SKILL.md +136 -0
- package/bundled-skills/soroban-liquidity-pool/SKILL.md +118 -0
- package/bundled-skills/soroban-oracle-data-feed-audit/SKILL.md +118 -0
- package/bundled-skills/soroban-storage-ttl-lifecycle/SKILL.md +118 -0
- package/bundled-skills/soroban-token-minter/SKILL.md +124 -0
- package/bundled-skills/stellar-anchor-integration/SKILL.md +136 -0
- package/bundled-skills/stellar-asset-clawback-compliance/SKILL.md +118 -0
- package/bundled-skills/stellar-escrow-timelock/SKILL.md +118 -0
- package/bundled-skills/stellar-multisig-threshold-coordinator/SKILL.md +112 -0
- package/bundled-skills/tech-writing-proofread/SKILL.md +78 -0
- package/bundled-skills/typescript-expert/scripts/ts_diagnostic.py +40 -19
- package/bundled-skills/waf-setup/SKILL.md +1 -1
- package/bundled-skills/web3-rate-limiting-circuit-breaker/SKILL.md +130 -0
- package/bundled-skills/web3-transaction-relayer-pool/SKILL.md +124 -0
- package/bundled-skills/youtube-summarizer/SKILL.md +3 -3
- package/bundled-skills/zk-proof-verification-pipeline/SKILL.md +124 -0
- package/package.json +1 -1
- package/skills_index.json +1059 -0
|
@@ -0,0 +1,136 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: smart-contract-formal-verification
|
|
3
|
+
description: 'Foundry and Soroban formal invariant verification register: state transition rules, boundary invariant properties, and symbolic execution checks.'
|
|
4
|
+
category: engineering
|
|
5
|
+
risk: safe
|
|
6
|
+
source: self
|
|
7
|
+
source_type: self
|
|
8
|
+
date_added: "2026-10-01"
|
|
9
|
+
author: Ranjeet2063
|
|
10
|
+
tags: [formal-verification, invariants, foundry, soroban, security, math]
|
|
11
|
+
tools: []
|
|
12
|
+
source_repo: Ranjeet2063/agentic-awesome-skills
|
|
13
|
+
---
|
|
14
|
+
|
|
15
|
+
# Smart Contract Formal Verification
|
|
16
|
+
|
|
17
|
+
**What it is:** Applies rigorous mathematical invariant proofs, symbolic execution engines, and property-based fuzz tests to verify smart contract safety.
|
|
18
|
+
|
|
19
|
+
## Overview
|
|
20
|
+
|
|
21
|
+
Provides a standardized, auditable framework and data model for **Smart Contract Formal Verification** operations across distributed engineering and decentralized application systems.
|
|
22
|
+
|
|
23
|
+
## When to Use This Skill
|
|
24
|
+
|
|
25
|
+
- When formalizing architectural contracts, security invariants, or operational limits for Smart Contract Formal Verification.
|
|
26
|
+
- When cross-functional review is required between protocol developers, smart contract auditors, and AI engineering agents.
|
|
27
|
+
- When generating reproducible CSV, SQL DDL, JSON Schema, and Notion property registers for tracking compliance.
|
|
28
|
+
|
|
29
|
+
## How It Works
|
|
30
|
+
|
|
31
|
+
1. Define the parameters, thresholds, and identity bindings required for the target operational register.
|
|
32
|
+
2. Select appropriate boundary enforcement values from validated enum select sets.
|
|
33
|
+
3. Export standardized artifacts (CSV table, SQL DDL, JSON Schema) to integrate into validation CI pipelines.
|
|
34
|
+
|
|
35
|
+
## Field Reference
|
|
36
|
+
|
|
37
|
+
| # | Field Name | Type | SQL Type | JSON Schema Type | Notion Property Type | Example Value |
|
|
38
|
+
|---|------------|------|----------|------------------|----------------------|---------------|
|
|
39
|
+
| 1 | Formal Spec ID | `id` | `SERIAL PRIMARY KEY` | `integer` | Text | `SPEC-001` |
|
|
40
|
+
| 2 | Target Contract Module | `text` | `VARCHAR(64)` | `string` | Text | `vault_liquidity_engine` |
|
|
41
|
+
| 3 | State Transition Property | `text` | `VARCHAR(128)` | `string` | Text | `Total Assets Equals Sum of Shares` |
|
|
42
|
+
| 4 | Verification Method | `select` | `VARCHAR(64)` | `string` | Select | `Foundry Invariant Fuzzing` |
|
|
43
|
+
| 5 | Fuzz Runs Count | `number` | `INTEGER` | `number` | Number | `100000` |
|
|
44
|
+
| 6 | Symbolic Execution Engine | `select` | `VARCHAR(32)` | `string` | Select | `Certora Prover` |
|
|
45
|
+
| 7 | Counterexample Discovered | `select` | `VARCHAR(16)` | `string` | Select | `No` |
|
|
46
|
+
| 8 | Mathematical Theorem Proved | `select` | `VARCHAR(16)` | `string` | Select | `Yes` |
|
|
47
|
+
| 9 | Invariant Violation Tolerance | `currency` | `NUMERIC(14,2)` | `number` | Number | `0.00` |
|
|
48
|
+
| 10 | Formal Verification Status | `select` | `VARCHAR(32)` | `string` | Select | `Formally Verified` |
|
|
49
|
+
| 11 | Proof Generation Date | `date` | `DATE` | `string, format: date` | Date | `2026-10-01` |
|
|
50
|
+
|
|
51
|
+
## Select Options
|
|
52
|
+
|
|
53
|
+
**Verification Method**
|
|
54
|
+
|
|
55
|
+
```
|
|
56
|
+
Foundry Invariant Fuzzing | Halmos Symbolic Execution | Certora Rule Prover | SMT Solver
|
|
57
|
+
```
|
|
58
|
+
|
|
59
|
+
**Symbolic Execution Engine**
|
|
60
|
+
|
|
61
|
+
```
|
|
62
|
+
Certora Prover | Halmos | Z3 SMT | None (Fuzzing Only)
|
|
63
|
+
```
|
|
64
|
+
|
|
65
|
+
**Counterexample Discovered**
|
|
66
|
+
|
|
67
|
+
```
|
|
68
|
+
Yes | No
|
|
69
|
+
```
|
|
70
|
+
|
|
71
|
+
**Mathematical Theorem Proved**
|
|
72
|
+
|
|
73
|
+
```
|
|
74
|
+
Yes | No
|
|
75
|
+
```
|
|
76
|
+
|
|
77
|
+
**Formal Verification Status**
|
|
78
|
+
|
|
79
|
+
```
|
|
80
|
+
Formally Verified | Violations Found | Proof In Progress
|
|
81
|
+
```
|
|
82
|
+
|
|
83
|
+
## Relations
|
|
84
|
+
|
|
85
|
+
- `Audit Reference` -> links to the formal review documentation or test repository.
|
|
86
|
+
- `Target Architecture` -> links to the deployed contract or autonomous agent runtime component.
|
|
87
|
+
|
|
88
|
+
## Examples
|
|
89
|
+
|
|
90
|
+
**Prompt**
|
|
91
|
+
|
|
92
|
+
```
|
|
93
|
+
How do I configure and track Smart Contract Formal Verification for our production environment?
|
|
94
|
+
```
|
|
95
|
+
|
|
96
|
+
**Recommended Next Step**
|
|
97
|
+
|
|
98
|
+
> Generate the unified field schema, SQL DDL migration, and JSON validation schema to register into your system catalog.
|
|
99
|
+
>
|
|
100
|
+
> Workflow: Define criteria -> Run automated verification -> Record baseline -> Monitor invariants.
|
|
101
|
+
|
|
102
|
+
## Best Practices
|
|
103
|
+
|
|
104
|
+
- Enforce strict typing on numerical bounds and currency amounts; avoid unstructured free-text fields for critical states.
|
|
105
|
+
- Re-run validation test suites on every state-altering commit or parameter change.
|
|
106
|
+
- Keep example data synthetic and isolated from production cryptographic keys or private endpoints.
|
|
107
|
+
|
|
108
|
+
## Limitations
|
|
109
|
+
|
|
110
|
+
- Provides architectural specifications, data models, and verification schemas; does not execute direct transaction signing without authorized external tooling.
|
|
111
|
+
- Requires network connectivity and valid RPC credentials when querying on-chain states.
|
|
112
|
+
|
|
113
|
+
## Security & Safety Notes
|
|
114
|
+
|
|
115
|
+
- All parameters declare `risk: safe`. No unauthorized state modification or privileged credential access is performed.
|
|
116
|
+
- Use synthetic dummy keys and mock addresses in test suites and local verification scripts.
|
|
117
|
+
|
|
118
|
+
## Common Pitfalls
|
|
119
|
+
|
|
120
|
+
- **Problem:** Mismatched decimal precision between contract runtime and database register.
|
|
121
|
+
**Solution:** Always verify decimals using the explicit field mapping in this reference.
|
|
122
|
+
- **Problem:** Missing authorization checks prior to state update.
|
|
123
|
+
**Solution:** Cross-validate against the Security Audit register before deployment.
|
|
124
|
+
|
|
125
|
+
## Related Skills
|
|
126
|
+
|
|
127
|
+
- @soroban-contract-audit - provides the security checklist and vulnerability categorization.
|
|
128
|
+
- @web3-rate-limiting-circuit-breaker - provides operational guardrails and threshold breakers.
|
|
129
|
+
- @cross-chain-relayer-audit - covers message hashes, nonces and quorum proofs.
|
|
130
|
+
|
|
131
|
+
## Reusable Prompt
|
|
132
|
+
|
|
133
|
+
```
|
|
134
|
+
I want to establish a verified Smart Contract Formal Verification register for our production protocol.
|
|
135
|
+
Guide me through the required field parameters and output the corresponding SQL DDL and JSON Schema.
|
|
136
|
+
```
|
|
@@ -0,0 +1,130 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: smart-contract-upgrade-governance
|
|
3
|
+
description: 'Soroban WASM upgrade governance register: executable bytecode hash, timelocked migration delays, and multi-sig authorization quorum.'
|
|
4
|
+
category: engineering
|
|
5
|
+
risk: safe
|
|
6
|
+
source: self
|
|
7
|
+
source_type: self
|
|
8
|
+
date_added: "2026-10-01"
|
|
9
|
+
author: Ranjeet2063
|
|
10
|
+
tags: [soroban, upgrade, governance, security, wasm, stellar]
|
|
11
|
+
tools: []
|
|
12
|
+
source_repo: Ranjeet2063/agentic-awesome-skills
|
|
13
|
+
---
|
|
14
|
+
|
|
15
|
+
# Smart Contract Upgrade Governance
|
|
16
|
+
|
|
17
|
+
**What it is:** Enforces deterministic timelocks, cryptographic bytecode hash verification, and multi-sig consensus for non-custodial smart contract upgrades.
|
|
18
|
+
|
|
19
|
+
## Overview
|
|
20
|
+
|
|
21
|
+
Provides a standardized, auditable framework and data model for **Smart Contract Upgrade Governance** operations across distributed engineering and decentralized application systems.
|
|
22
|
+
|
|
23
|
+
## When to Use This Skill
|
|
24
|
+
|
|
25
|
+
- When formalizing architectural contracts, security invariants, or operational limits for Smart Contract Upgrade Governance.
|
|
26
|
+
- When cross-functional review is required between protocol developers, smart contract auditors, and AI engineering agents.
|
|
27
|
+
- When generating reproducible CSV, SQL DDL, JSON Schema, and Notion property registers for tracking compliance.
|
|
28
|
+
|
|
29
|
+
## How It Works
|
|
30
|
+
|
|
31
|
+
1. Define the parameters, thresholds, and identity bindings required for the target operational register.
|
|
32
|
+
2. Select appropriate boundary enforcement values from validated enum select sets.
|
|
33
|
+
3. Export standardized artifacts (CSV table, SQL DDL, JSON Schema) to integrate into validation CI pipelines.
|
|
34
|
+
|
|
35
|
+
## Field Reference
|
|
36
|
+
|
|
37
|
+
| # | Field Name | Type | SQL Type | JSON Schema Type | Notion Property Type | Example Value |
|
|
38
|
+
|---|------------|------|----------|------------------|----------------------|---------------|
|
|
39
|
+
| 1 | Upgrade Proposal ID | `id` | `SERIAL PRIMARY KEY` | `integer` | Text | `UPG-001` |
|
|
40
|
+
| 2 | Target Contract Address | `text` | `VARCHAR(56)` | `string` | Text | `CAUD...` |
|
|
41
|
+
| 3 | New WASM Bytecode Hash | `text` | `VARCHAR(64)` | `string` | Text | `e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855` |
|
|
42
|
+
| 4 | Timelock Delay Hours | `number` | `INTEGER` | `number` | Number | `48` |
|
|
43
|
+
| 5 | Governance Quorum Required | `select` | `VARCHAR(32)` | `string` | Select | `3-of-5 Multisig` |
|
|
44
|
+
| 6 | State Migration Function | `text` | `VARCHAR(64)` | `string` | Text | `migrate_storage_v2` |
|
|
45
|
+
| 7 | Emergency Cancel Permitted | `select` | `VARCHAR(16)` | `string` | Select | `Yes` |
|
|
46
|
+
| 8 | Audit Certification Attached | `select` | `VARCHAR(16)` | `string` | Select | `Yes` |
|
|
47
|
+
| 9 | Upgrade Lifecycle Status | `select` | `VARCHAR(32)` | `string` | Select | `Timelock Pending` |
|
|
48
|
+
| 10 | Authorized Proposer | `text` | `VARCHAR(56)` | `string` | Text | `GPROP...` |
|
|
49
|
+
| 11 | Proposal Submission Date | `date` | `DATE` | `string, format: date` | Date | `2026-10-01` |
|
|
50
|
+
|
|
51
|
+
## Select Options
|
|
52
|
+
|
|
53
|
+
**Governance Quorum Required**
|
|
54
|
+
|
|
55
|
+
```
|
|
56
|
+
3-of-5 Multisig | 4-of-7 Multisig | DAO Token Vote Quorum
|
|
57
|
+
```
|
|
58
|
+
|
|
59
|
+
**Emergency Cancel Permitted**
|
|
60
|
+
|
|
61
|
+
```
|
|
62
|
+
Yes | No
|
|
63
|
+
```
|
|
64
|
+
|
|
65
|
+
**Audit Certification Attached**
|
|
66
|
+
|
|
67
|
+
```
|
|
68
|
+
Yes | No
|
|
69
|
+
```
|
|
70
|
+
|
|
71
|
+
**Upgrade Lifecycle Status**
|
|
72
|
+
|
|
73
|
+
```
|
|
74
|
+
Draft | Timelock Pending | Executed | Cancelled Revoked
|
|
75
|
+
```
|
|
76
|
+
|
|
77
|
+
## Relations
|
|
78
|
+
|
|
79
|
+
- `Audit Reference` -> links to the formal review documentation or test repository.
|
|
80
|
+
- `Target Architecture` -> links to the deployed contract or autonomous agent runtime component.
|
|
81
|
+
|
|
82
|
+
## Examples
|
|
83
|
+
|
|
84
|
+
**Prompt**
|
|
85
|
+
|
|
86
|
+
```
|
|
87
|
+
How do I configure and track Smart Contract Upgrade Governance for our production environment?
|
|
88
|
+
```
|
|
89
|
+
|
|
90
|
+
**Recommended Next Step**
|
|
91
|
+
|
|
92
|
+
> Generate the unified field schema, SQL DDL migration, and JSON validation schema to register into your system catalog.
|
|
93
|
+
>
|
|
94
|
+
> Workflow: Define criteria -> Run automated verification -> Record baseline -> Monitor invariants.
|
|
95
|
+
|
|
96
|
+
## Best Practices
|
|
97
|
+
|
|
98
|
+
- Enforce strict typing on numerical bounds and currency amounts; avoid unstructured free-text fields for critical states.
|
|
99
|
+
- Re-run validation test suites on every state-altering commit or parameter change.
|
|
100
|
+
- Keep example data synthetic and isolated from production cryptographic keys or private endpoints.
|
|
101
|
+
|
|
102
|
+
## Limitations
|
|
103
|
+
|
|
104
|
+
- Provides architectural specifications, data models, and verification schemas; does not execute direct transaction signing without authorized external tooling.
|
|
105
|
+
- Requires network connectivity and valid RPC credentials when querying on-chain states.
|
|
106
|
+
|
|
107
|
+
## Security & Safety Notes
|
|
108
|
+
|
|
109
|
+
- All parameters declare `risk: safe`. No unauthorized state modification or privileged credential access is performed.
|
|
110
|
+
- Use synthetic dummy keys and mock addresses in test suites and local verification scripts.
|
|
111
|
+
|
|
112
|
+
## Common Pitfalls
|
|
113
|
+
|
|
114
|
+
- **Problem:** Mismatched decimal precision between contract runtime and database register.
|
|
115
|
+
**Solution:** Always verify decimals using the explicit field mapping in this reference.
|
|
116
|
+
- **Problem:** Missing authorization checks prior to state update.
|
|
117
|
+
**Solution:** Cross-validate against the Security Audit register before deployment.
|
|
118
|
+
|
|
119
|
+
## Related Skills
|
|
120
|
+
|
|
121
|
+
- @soroban-contract-audit - provides the security checklist and vulnerability categorization.
|
|
122
|
+
- @smart-contract-formal-verification - verifies state invariants mathematically.
|
|
123
|
+
- @stellar-multisig-threshold-coordinator - covers signer weights and threshold coordination.
|
|
124
|
+
|
|
125
|
+
## Reusable Prompt
|
|
126
|
+
|
|
127
|
+
```
|
|
128
|
+
I want to establish a verified Smart Contract Upgrade Governance register for our production protocol.
|
|
129
|
+
Guide me through the required field parameters and output the corresponding SQL DDL and JSON Schema.
|
|
130
|
+
```
|
|
@@ -0,0 +1,136 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: soroban-contract-audit
|
|
3
|
+
description: 'Soroban smart contract security audit register: authorization checks, panic pathways, integer overflows, and storage footprint verification for Stellar.'
|
|
4
|
+
category: engineering
|
|
5
|
+
risk: safe
|
|
6
|
+
source: self
|
|
7
|
+
source_type: self
|
|
8
|
+
date_added: "2026-10-01"
|
|
9
|
+
author: Ranjeet2063
|
|
10
|
+
tags: [stellar, soroban, rust, smart-contracts, security, audit, web3]
|
|
11
|
+
tools: []
|
|
12
|
+
source_repo: Ranjeet2063/agentic-awesome-skills
|
|
13
|
+
---
|
|
14
|
+
|
|
15
|
+
# Soroban Contract Security Audit
|
|
16
|
+
|
|
17
|
+
**What it is:** Tracks formal security audit findings, authorization invariants, and WASM storage footprint compliance for Soroban Rust smart contracts on Stellar.
|
|
18
|
+
|
|
19
|
+
## Overview
|
|
20
|
+
|
|
21
|
+
Provides a standardized, auditable framework and data model for **Soroban Contract Security Audit** operations across distributed engineering and decentralized application systems.
|
|
22
|
+
|
|
23
|
+
## When to Use This Skill
|
|
24
|
+
|
|
25
|
+
- When formalizing architectural contracts, security invariants, or operational limits for Soroban Contract Security Audit.
|
|
26
|
+
- When cross-functional review is required between protocol developers, smart contract auditors, and AI engineering agents.
|
|
27
|
+
- When generating reproducible CSV, SQL DDL, JSON Schema, and Notion property registers for tracking compliance.
|
|
28
|
+
|
|
29
|
+
## How It Works
|
|
30
|
+
|
|
31
|
+
1. Define the parameters, thresholds, and identity bindings required for the target operational register.
|
|
32
|
+
2. Select appropriate boundary enforcement values from validated enum select sets.
|
|
33
|
+
3. Export standardized artifacts (CSV table, SQL DDL, JSON Schema) to integrate into validation CI pipelines.
|
|
34
|
+
|
|
35
|
+
## Field Reference
|
|
36
|
+
|
|
37
|
+
| # | Field Name | Type | SQL Type | JSON Schema Type | Notion Property Type | Example Value |
|
|
38
|
+
|---|------------|------|----------|------------------|----------------------|---------------|
|
|
39
|
+
| 1 | Audit Finding ID | `id` | `SERIAL PRIMARY KEY` | `integer` | Text | `AUD-001` |
|
|
40
|
+
| 2 | Contract Address | `text` | `VARCHAR(56)` | `string` | Text | `CA3D5K...` |
|
|
41
|
+
| 3 | Function Name | `text` | `VARCHAR(64)` | `string` | Text | `transfer_with_approval` |
|
|
42
|
+
| 4 | Severity Tier | `select` | `VARCHAR(32)` | `string` | Select | `High` |
|
|
43
|
+
| 5 | Vulnerability Class | `select` | `VARCHAR(64)` | `string` | Select | `Missing Auth Check` |
|
|
44
|
+
| 6 | Storage Footprint Type | `select` | `VARCHAR(32)` | `string` | Select | `Persistent` |
|
|
45
|
+
| 7 | Panic Pathway Present | `select` | `VARCHAR(16)` | `string` | Select | `Yes` |
|
|
46
|
+
| 8 | PoC Test Case | `text` | `VARCHAR(255)` | `string` | Text | `test_unauthorized_state_drain` |
|
|
47
|
+
| 9 | Remediation Status | `select` | `VARCHAR(32)` | `string` | Select | `Remediated` |
|
|
48
|
+
| 10 | Auditor Lead | `text` | `VARCHAR(64)` | `string` | Text | `Ranjeet2063` |
|
|
49
|
+
| 11 | Verification Date | `date` | `DATE` | `string, format: date` | Date | `2026-10-01` |
|
|
50
|
+
|
|
51
|
+
## Select Options
|
|
52
|
+
|
|
53
|
+
**Severity Tier**
|
|
54
|
+
|
|
55
|
+
```
|
|
56
|
+
Critical | High | Medium | Low | Informational
|
|
57
|
+
```
|
|
58
|
+
|
|
59
|
+
**Vulnerability Class**
|
|
60
|
+
|
|
61
|
+
```
|
|
62
|
+
Missing Auth Check | Integer Overflow | Storage Desync | Reentrancy Variant | Unbounded Loop | Gas Exhaustion
|
|
63
|
+
```
|
|
64
|
+
|
|
65
|
+
**Storage Footprint Type**
|
|
66
|
+
|
|
67
|
+
```
|
|
68
|
+
Instance | Persistent | Temporary
|
|
69
|
+
```
|
|
70
|
+
|
|
71
|
+
**Panic Pathway Present**
|
|
72
|
+
|
|
73
|
+
```
|
|
74
|
+
Yes | No
|
|
75
|
+
```
|
|
76
|
+
|
|
77
|
+
**Remediation Status**
|
|
78
|
+
|
|
79
|
+
```
|
|
80
|
+
Identified | In Progress | Remediated | Risk Accepted
|
|
81
|
+
```
|
|
82
|
+
|
|
83
|
+
## Relations
|
|
84
|
+
|
|
85
|
+
- `Audit Reference` -> links to the formal review documentation or test repository.
|
|
86
|
+
- `Target Architecture` -> links to the deployed contract or autonomous agent runtime component.
|
|
87
|
+
|
|
88
|
+
## Examples
|
|
89
|
+
|
|
90
|
+
**Prompt**
|
|
91
|
+
|
|
92
|
+
```
|
|
93
|
+
How do I configure and track Soroban Contract Security Audit for our production environment?
|
|
94
|
+
```
|
|
95
|
+
|
|
96
|
+
**Recommended Next Step**
|
|
97
|
+
|
|
98
|
+
> Generate the unified field schema, SQL DDL migration, and JSON validation schema to register into your system catalog.
|
|
99
|
+
>
|
|
100
|
+
> Workflow: Define criteria -> Run automated verification -> Record baseline -> Monitor invariants.
|
|
101
|
+
|
|
102
|
+
## Best Practices
|
|
103
|
+
|
|
104
|
+
- Enforce strict typing on numerical bounds and currency amounts; avoid unstructured free-text fields for critical states.
|
|
105
|
+
- Re-run validation test suites on every state-altering commit or parameter change.
|
|
106
|
+
- Keep example data synthetic and isolated from production cryptographic keys or private endpoints.
|
|
107
|
+
|
|
108
|
+
## Limitations
|
|
109
|
+
|
|
110
|
+
- Provides architectural specifications, data models, and verification schemas; does not execute direct transaction signing without authorized external tooling.
|
|
111
|
+
- Requires network connectivity and valid RPC credentials when querying on-chain states.
|
|
112
|
+
|
|
113
|
+
## Security & Safety Notes
|
|
114
|
+
|
|
115
|
+
- All parameters declare `risk: safe`. No unauthorized state modification or privileged credential access is performed.
|
|
116
|
+
- Use synthetic dummy keys and mock addresses in test suites and local verification scripts.
|
|
117
|
+
|
|
118
|
+
## Common Pitfalls
|
|
119
|
+
|
|
120
|
+
- **Problem:** Mismatched decimal precision between contract runtime and database register.
|
|
121
|
+
**Solution:** Always verify decimals using the explicit field mapping in this reference.
|
|
122
|
+
- **Problem:** Missing authorization checks prior to state update.
|
|
123
|
+
**Solution:** Cross-validate against the Security Audit register before deployment.
|
|
124
|
+
|
|
125
|
+
## Related Skills
|
|
126
|
+
|
|
127
|
+
- @smart-contract-formal-verification - verifies state invariants mathematically.
|
|
128
|
+
- @soroban-liquidity-pool - covers AMM invariant and LP-share modelling.
|
|
129
|
+
- @soroban-token-minter - covers SEP-41 token supply, admin and event modelling.
|
|
130
|
+
|
|
131
|
+
## Reusable Prompt
|
|
132
|
+
|
|
133
|
+
```
|
|
134
|
+
I want to establish a verified Soroban Contract Security Audit register for our production protocol.
|
|
135
|
+
Guide me through the required field parameters and output the corresponding SQL DDL and JSON Schema.
|
|
136
|
+
```
|
|
@@ -0,0 +1,118 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: soroban-liquidity-pool
|
|
3
|
+
description: 'Automated market maker liquidity pool register: constant-product invariant curves, swap fee tiers, and LP token shares for Soroban DeFi.'
|
|
4
|
+
category: engineering
|
|
5
|
+
risk: safe
|
|
6
|
+
source: self
|
|
7
|
+
source_type: self
|
|
8
|
+
date_added: "2026-10-01"
|
|
9
|
+
author: Ranjeet2063
|
|
10
|
+
tags: [soroban, amm, liquidity, stellar, dex, defi, rust]
|
|
11
|
+
tools: []
|
|
12
|
+
source_repo: Ranjeet2063/agentic-awesome-skills
|
|
13
|
+
---
|
|
14
|
+
|
|
15
|
+
# Soroban Liquidity Pool Architecture
|
|
16
|
+
|
|
17
|
+
**What it is:** Tracks automated market maker (AMM) liquidity pools, mathematical invariant boundaries, and token reserve ratios on Soroban DeFi networks.
|
|
18
|
+
|
|
19
|
+
## Overview
|
|
20
|
+
|
|
21
|
+
Provides a standardized, auditable framework and data model for **Soroban Liquidity Pool Architecture** operations across distributed engineering and decentralized application systems.
|
|
22
|
+
|
|
23
|
+
## When to Use This Skill
|
|
24
|
+
|
|
25
|
+
- When formalizing architectural contracts, security invariants, or operational limits for Soroban Liquidity Pool Architecture.
|
|
26
|
+
- When cross-functional review is required between protocol developers, smart contract auditors, and AI engineering agents.
|
|
27
|
+
- When generating reproducible CSV, SQL DDL, JSON Schema, and Notion property registers for tracking compliance.
|
|
28
|
+
|
|
29
|
+
## How It Works
|
|
30
|
+
|
|
31
|
+
1. Define the parameters, thresholds, and identity bindings required for the target operational register.
|
|
32
|
+
2. Select appropriate boundary enforcement values from validated enum select sets.
|
|
33
|
+
3. Export standardized artifacts (CSV table, SQL DDL, JSON Schema) to integrate into validation CI pipelines.
|
|
34
|
+
|
|
35
|
+
## Field Reference
|
|
36
|
+
|
|
37
|
+
| # | Field Name | Type | SQL Type | JSON Schema Type | Notion Property Type | Example Value |
|
|
38
|
+
|---|------------|------|----------|------------------|----------------------|---------------|
|
|
39
|
+
| 1 | Pool Pair ID | `id` | `SERIAL PRIMARY KEY` | `integer` | Text | `POOL-001` |
|
|
40
|
+
| 2 | Token A Contract | `text` | `VARCHAR(56)` | `string` | Text | `CASWAP1...` |
|
|
41
|
+
| 3 | Token B Contract | `text` | `VARCHAR(56)` | `string` | Text | `CASWAP2...` |
|
|
42
|
+
| 4 | Invariant Model | `select` | `VARCHAR(32)` | `string` | Select | `Constant Product (xy=k)` |
|
|
43
|
+
| 5 | Fee Basis Points | `number` | `INTEGER` | `number` | Number | `30` |
|
|
44
|
+
| 6 | Token A Reserve | `currency` | `NUMERIC(24,7)` | `number` | Number | `250000.0000000` |
|
|
45
|
+
| 7 | Token B Reserve | `currency` | `NUMERIC(24,7)` | `number` | Number | `125000.0000000` |
|
|
46
|
+
| 8 | Total LP Shares Issued | `currency` | `NUMERIC(24,7)` | `number` | Number | `176776.6952966` |
|
|
47
|
+
| 9 | Slippage Tolerance Bps | `number` | `INTEGER` | `number` | Number | `50` |
|
|
48
|
+
| 10 | Pool Health Status | `select` | `VARCHAR(32)` | `string` | Select | `Balanced` |
|
|
49
|
+
| 11 | Last Rebalance Date | `date` | `DATE` | `string, format: date` | Date | `2026-10-01` |
|
|
50
|
+
|
|
51
|
+
## Select Options
|
|
52
|
+
|
|
53
|
+
**Invariant Model**
|
|
54
|
+
|
|
55
|
+
```
|
|
56
|
+
Constant Product (xy=k) | StableSwap Curve | Concentrated Liquidity
|
|
57
|
+
```
|
|
58
|
+
|
|
59
|
+
**Pool Health Status**
|
|
60
|
+
|
|
61
|
+
```
|
|
62
|
+
Balanced | Impermanent Divergence | High Volatility | Frozen
|
|
63
|
+
```
|
|
64
|
+
|
|
65
|
+
## Relations
|
|
66
|
+
|
|
67
|
+
- `Audit Reference` -> links to the formal review documentation or test repository.
|
|
68
|
+
- `Target Architecture` -> links to the deployed contract or autonomous agent runtime component.
|
|
69
|
+
|
|
70
|
+
## Examples
|
|
71
|
+
|
|
72
|
+
**Prompt**
|
|
73
|
+
|
|
74
|
+
```
|
|
75
|
+
How do I configure and track Soroban Liquidity Pool Architecture for our production environment?
|
|
76
|
+
```
|
|
77
|
+
|
|
78
|
+
**Recommended Next Step**
|
|
79
|
+
|
|
80
|
+
> Generate the unified field schema, SQL DDL migration, and JSON validation schema to register into your system catalog.
|
|
81
|
+
>
|
|
82
|
+
> Workflow: Define criteria -> Run automated verification -> Record baseline -> Monitor invariants.
|
|
83
|
+
|
|
84
|
+
## Best Practices
|
|
85
|
+
|
|
86
|
+
- Enforce strict typing on numerical bounds and currency amounts; avoid unstructured free-text fields for critical states.
|
|
87
|
+
- Re-run validation test suites on every state-altering commit or parameter change.
|
|
88
|
+
- Keep example data synthetic and isolated from production cryptographic keys or private endpoints.
|
|
89
|
+
|
|
90
|
+
## Limitations
|
|
91
|
+
|
|
92
|
+
- Provides architectural specifications, data models, and verification schemas; does not execute direct transaction signing without authorized external tooling.
|
|
93
|
+
- Requires network connectivity and valid RPC credentials when querying on-chain states.
|
|
94
|
+
|
|
95
|
+
## Security & Safety Notes
|
|
96
|
+
|
|
97
|
+
- All parameters declare `risk: safe`. No unauthorized state modification or privileged credential access is performed.
|
|
98
|
+
- Use synthetic dummy keys and mock addresses in test suites and local verification scripts.
|
|
99
|
+
|
|
100
|
+
## Common Pitfalls
|
|
101
|
+
|
|
102
|
+
- **Problem:** Mismatched decimal precision between contract runtime and database register.
|
|
103
|
+
**Solution:** Always verify decimals using the explicit field mapping in this reference.
|
|
104
|
+
- **Problem:** Missing authorization checks prior to state update.
|
|
105
|
+
**Solution:** Cross-validate against the Security Audit register before deployment.
|
|
106
|
+
|
|
107
|
+
## Related Skills
|
|
108
|
+
|
|
109
|
+
- @soroban-contract-audit - provides the security checklist and vulnerability categorization.
|
|
110
|
+
- @soroban-token-minter - covers SEP-41 token supply, admin and event modelling.
|
|
111
|
+
- @web3-rate-limiting-circuit-breaker - provides operational guardrails and threshold breakers.
|
|
112
|
+
|
|
113
|
+
## Reusable Prompt
|
|
114
|
+
|
|
115
|
+
```
|
|
116
|
+
I want to establish a verified Soroban Liquidity Pool Architecture register for our production protocol.
|
|
117
|
+
Guide me through the required field parameters and output the corresponding SQL DDL and JSON Schema.
|
|
118
|
+
```
|
|
@@ -0,0 +1,118 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: soroban-oracle-data-feed-audit
|
|
3
|
+
description: 'DeFi price oracle integration and safety audit register: heartbeat bounds, stale price threshold reversion, and TWAP medianizer validation.'
|
|
4
|
+
category: engineering
|
|
5
|
+
risk: safe
|
|
6
|
+
source: self
|
|
7
|
+
source_type: self
|
|
8
|
+
date_added: "2026-10-01"
|
|
9
|
+
author: Ranjeet2063
|
|
10
|
+
tags: [soroban, oracle, defi, pricing, stellar, security, web3]
|
|
11
|
+
tools: []
|
|
12
|
+
source_repo: Ranjeet2063/agentic-awesome-skills
|
|
13
|
+
---
|
|
14
|
+
|
|
15
|
+
# Soroban Oracle Data Feed Audit
|
|
16
|
+
|
|
17
|
+
**What it is:** Tracks decentralized price feed providers, staleness boundaries, and multi-source medianizer logic to prevent oracle manipulation in Soroban protocols.
|
|
18
|
+
|
|
19
|
+
## Overview
|
|
20
|
+
|
|
21
|
+
Provides a standardized, auditable framework and data model for **Soroban Oracle Data Feed Audit** operations across distributed engineering and decentralized application systems.
|
|
22
|
+
|
|
23
|
+
## When to Use This Skill
|
|
24
|
+
|
|
25
|
+
- When formalizing architectural contracts, security invariants, or operational limits for Soroban Oracle Data Feed Audit.
|
|
26
|
+
- When cross-functional review is required between protocol developers, smart contract auditors, and AI engineering agents.
|
|
27
|
+
- When generating reproducible CSV, SQL DDL, JSON Schema, and Notion property registers for tracking compliance.
|
|
28
|
+
|
|
29
|
+
## How It Works
|
|
30
|
+
|
|
31
|
+
1. Define the parameters, thresholds, and identity bindings required for the target operational register.
|
|
32
|
+
2. Select appropriate boundary enforcement values from validated enum select sets.
|
|
33
|
+
3. Export standardized artifacts (CSV table, SQL DDL, JSON Schema) to integrate into validation CI pipelines.
|
|
34
|
+
|
|
35
|
+
## Field Reference
|
|
36
|
+
|
|
37
|
+
| # | Field Name | Type | SQL Type | JSON Schema Type | Notion Property Type | Example Value |
|
|
38
|
+
|---|------------|------|----------|------------------|----------------------|---------------|
|
|
39
|
+
| 1 | Oracle Feed ID | `id` | `SERIAL PRIMARY KEY` | `integer` | Text | `ORC-001` |
|
|
40
|
+
| 2 | Asset Pair Identifier | `text` | `VARCHAR(32)` | `string` | Text | `XLM/USD` |
|
|
41
|
+
| 3 | Oracle Contract Address | `text` | `VARCHAR(56)` | `string` | Text | `CORC...` |
|
|
42
|
+
| 4 | Max Stale Period Seconds | `number` | `INTEGER` | `number` | Number | `300` |
|
|
43
|
+
| 5 | Deviation Threshold Bps | `number` | `INTEGER` | `number` | Number | `100` |
|
|
44
|
+
| 6 | TWAP Window Length Seconds | `number` | `INTEGER` | `number` | Number | `1800` |
|
|
45
|
+
| 7 | Medianizer Minimum Sources | `number` | `INTEGER` | `number` | Number | `3` |
|
|
46
|
+
| 8 | Circuit Breaker Reversion Bound | `select` | `VARCHAR(16)` | `string` | Select | `Yes` |
|
|
47
|
+
| 9 | Feed Health Status | `select` | `VARCHAR(32)` | `string` | Select | `Active Healthy` |
|
|
48
|
+
| 10 | Last Reported Price | `currency` | `NUMERIC(18,7)` | `number` | Number | `0.1250000` |
|
|
49
|
+
| 11 | Audit Verification Date | `date` | `DATE` | `string, format: date` | Date | `2026-10-01` |
|
|
50
|
+
|
|
51
|
+
## Select Options
|
|
52
|
+
|
|
53
|
+
**Circuit Breaker Reversion Bound**
|
|
54
|
+
|
|
55
|
+
```
|
|
56
|
+
Yes | No
|
|
57
|
+
```
|
|
58
|
+
|
|
59
|
+
**Feed Health Status**
|
|
60
|
+
|
|
61
|
+
```
|
|
62
|
+
Active Healthy | Stale Alert | Deviation Triggered | Paused
|
|
63
|
+
```
|
|
64
|
+
|
|
65
|
+
## Relations
|
|
66
|
+
|
|
67
|
+
- `Audit Reference` -> links to the formal review documentation or test repository.
|
|
68
|
+
- `Target Architecture` -> links to the deployed contract or autonomous agent runtime component.
|
|
69
|
+
|
|
70
|
+
## Examples
|
|
71
|
+
|
|
72
|
+
**Prompt**
|
|
73
|
+
|
|
74
|
+
```
|
|
75
|
+
How do I configure and track Soroban Oracle Data Feed Audit for our production environment?
|
|
76
|
+
```
|
|
77
|
+
|
|
78
|
+
**Recommended Next Step**
|
|
79
|
+
|
|
80
|
+
> Generate the unified field schema, SQL DDL migration, and JSON validation schema to register into your system catalog.
|
|
81
|
+
>
|
|
82
|
+
> Workflow: Define criteria -> Run automated verification -> Record baseline -> Monitor invariants.
|
|
83
|
+
|
|
84
|
+
## Best Practices
|
|
85
|
+
|
|
86
|
+
- Enforce strict typing on numerical bounds and currency amounts; avoid unstructured free-text fields for critical states.
|
|
87
|
+
- Re-run validation test suites on every state-altering commit or parameter change.
|
|
88
|
+
- Keep example data synthetic and isolated from production cryptographic keys or private endpoints.
|
|
89
|
+
|
|
90
|
+
## Limitations
|
|
91
|
+
|
|
92
|
+
- Provides architectural specifications, data models, and verification schemas; does not execute direct transaction signing without authorized external tooling.
|
|
93
|
+
- Requires network connectivity and valid RPC credentials when querying on-chain states.
|
|
94
|
+
|
|
95
|
+
## Security & Safety Notes
|
|
96
|
+
|
|
97
|
+
- All parameters declare `risk: safe`. No unauthorized state modification or privileged credential access is performed.
|
|
98
|
+
- Use synthetic dummy keys and mock addresses in test suites and local verification scripts.
|
|
99
|
+
|
|
100
|
+
## Common Pitfalls
|
|
101
|
+
|
|
102
|
+
- **Problem:** Mismatched decimal precision between contract runtime and database register.
|
|
103
|
+
**Solution:** Always verify decimals using the explicit field mapping in this reference.
|
|
104
|
+
- **Problem:** Missing authorization checks prior to state update.
|
|
105
|
+
**Solution:** Cross-validate against the Security Audit register before deployment.
|
|
106
|
+
|
|
107
|
+
## Related Skills
|
|
108
|
+
|
|
109
|
+
- @soroban-contract-audit - provides the security checklist and vulnerability categorization.
|
|
110
|
+
- @soroban-storage-ttl-lifecycle - covers ledger rent and TTL extension policy.
|
|
111
|
+
- @smart-contract-formal-verification - verifies state invariants mathematically.
|
|
112
|
+
|
|
113
|
+
## Reusable Prompt
|
|
114
|
+
|
|
115
|
+
```
|
|
116
|
+
I want to establish a verified Soroban Oracle Data Feed Audit register for our production protocol.
|
|
117
|
+
Guide me through the required field parameters and output the corresponding SQL DDL and JSON Schema.
|
|
118
|
+
```
|