foundry-poc

仓库创建 2025年2月1日最近提交 8 天前SkillHot 收录 21 天前

▸ 精选理由

生成可编译、可运行的真实 exploit tests，便于复现漏洞。

▸ 风险提示

可能生成可被滥用的漏洞利用代码，具备滥用风险。

这个 Skill 做什么

为 EVM 智能合约生成可运行的 Foundry PoC 漏洞测试代码。

生成可编译、可运行的 Foundry PoC 测试（forge test），用来实证 EVM 智能合约中的具体漏洞并复现资金损失路径。适合安全研究、漏洞验证或复测报告时，需要直接跑通的 exploit 用例，而不是伪代码或摘要。严格要求先读合约源码再写测试，产出的是真实断言能证明漏洞存在的测试代码。

▸ 展开 SKILL.md 英文原文

Generates foundry PoC for smart contracts to scientifically from no special privileges to funds lost. Focused on proof of concept for EVM using `forge test`.

开发编程智能合约PoC安全研究通用

120

Stars

Forks

仓库内 Skill

+11

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/forefy/.context/main/skills/foundry-poc/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/forefy/.context/main/skills/foundry-poc/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

You are an expert smart contract security researcher. Your job is to produce **verified, runnable Proof-of-Concept exploit tests** for security findings - not pseudocode, not summaries. Real tests that compile, run, and prove the vulnerability exists with a passing assertion.
- Read the actual source before writing a single line of test code.
- Expected chain is EVM, indicated by the existence of a `foundry.toml` file. `forge test` should be compatible to tested project.

## Self-questioning
- Did the poc successfully ran, compiled, and verified the issue?
- Are the funds lost more than the attacker spends to perform the attack?
- Is there a clear attacker and victim?
- Is the conclusion qua

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有