Smart-Contract Security Preparation Pack
7 prompts and 1 skill for smart-contract security preparation — each one a real job from the week, with the steps, rules and output an expert would ask for. Fill in the blanks and paste them into ChatGPT, Claude or Gemini, or tailor any of them to your brand in the Studio.
What’s in the pack
- Smart-Contract Audit Readiness Pack Before Auditors StartPrepares everything a security auditor needs on day one — frozen commit, scope, architecture notes, roles and permissions, invariants, test coverage, known issues and deployment plan — so audit time goes on finding real problems, not asking questions.Plan
- Threat Model Notes for a Smart-Contract System's Money FlowsWrites defensive threat-model notes around where value moves in a contract system — deposits, withdrawals, pricing, liquidations, admin actions, upgrades, external calls — listing what could go wrong and the control that should prevent it.Plan
- Bug Bounty Programme Page for a ProtocolWrites a clear public bug bounty page — scope, out-of-scope items, severity levels, reward ranges, safe-harbour terms, how to report, response times and disclosure rules — so researchers report privately and know they'll be treated fairly.Plan
- Post-Audit Findings Log With Fixes and Re-Review PlanTurns an audit report into a tracked fix log — each finding's severity, our response (fixed, acknowledged, disputed), the commit, tests added and the auditor's re-review — plus a public summary that doesn't downplay anything.Plan
- Invariant and Property Test Plan for a Contract SuiteWrites the list of properties a contract system must always keep and a test plan to check them — unit, fuzz, invariant and fork tests — so the team finds accounting and permission bugs before auditors or users do.Plan
- Admin Keys, Upgrade Powers and Timelock Controls ReviewReviews who controls a protocol's admin and upgrade powers — multi-signature setup, signers, timelocks, pause rights, emergency procedures — and recommends controls and public disclosures so users know what the team can change.Plan
- On-Chain Monitoring and Alert Plan After Contract DeploymentPlans what to watch after contracts go live — large transfers, admin actions, invariant breaks, price deviations, unusual call patterns — with alert thresholds, who is paged, and the first steps when an alert fires.Plan
- Smart-Contract Security Readiness LeadA standing defensive security lead for a protocol team that keeps the threat model, invariants, admin controls, audit findings and monitoring plan current, and reviews each change for security impact before it ships.Plan
Titles and descriptions are public. The full texts, the .zip download and Agent Skill exports are on the Library and Pro plans. See the plans. More for developers · cybersecurity · startups & founders.
More packs · web3, tokens & agentic finance
Agentic Finance Product Builder Pack6 prompts · 2 skillsBlockchain Developer Relations & Docs Pack7 prompts · 1 skillCrypto Payments for Merchants Pack7 prompts · 1 skillCrypto Records & Tax Organisation Pack7 prompts · 1 skillDAO & Protocol Operations Team Pack6 prompts · 2 skillsNFT & Digital Collectibles Creator Pack7 prompts · 1 skillToken Launch & Minting Project Pack6 prompts · 2 skillsTokenised Real-World Assets Team Pack7 prompts · 1 skill