Blockchain Protocol Security Audit Preparation
Document threat models and attack surfaces for blockchain audit prep
What You Can Do
You can systematically document threat models, map attack surfaces, and articulate security assumptions for your blockchain protocol—all critical deliverables auditors expect. This skill guides you through building comprehensive security documentation that demonstrates you've thought deeply about potential vulnerabilities and risks before audit teams arrive. You'll create audit-ready artifacts that accelerate the audit process and help identify gaps in your security posture early.
Features
Identify and document potential attack vectors and threat actors relevant to your protocol
Create comprehensive diagrams showing external interfaces, dependencies, and potential entry points
Document explicit assumptions about the security environment, trust models, and dependencies
Categorize findings using standard frameworks (CVSS, severity matrices)
Quantify likelihood and impact to prioritize remediation efforts
Verify all audit deliverables are documented and complete before submission
Generate clear diagrams and descriptions of your protocol's security design
Example Output
Threat Model Example
Threat Actor: External attacker with access to node infrastructure Attack Vector: Network-level eclipse attack isolating validator Impact: Temporary consensus disruption Mitigation: Peer diversity requirements + connection limits
Attack Surface Mapping
External Entry Points:
├─ RPC endpoints (read-only, authenticated)
├─ P2P network (permissionless gossip protocol)
└─ Consensus layer (stake-weighted voting)
Internal Components at Risk:
├─ Transaction validation (custom WASM VM)
├─ State storage (encrypted key-value store)
└─ Network messaging (Ed25519 signatures)
Security Assumptions Document
- Assumes minimum 2/3 stake behaves honestly
- Requires nodes to verify cryptographic proofs
- Depends on system clock accuracy within ±30s
- Assumes network messages may be delayed but not reordered indefinitely
What's Included
- SKILL.md: Full security audit preparation workflow and prompts
- Threat Model Template: Structured format for documenting threats, actors, and mitigations
- Attack Surface Mapping Worksheet: Step-by-step guide to identifying and diagramming entry points
- Security Assumptions Checklist: Comprehensive list of common assumptions to explicitly document
- Risk Assessment Framework: Methodology for scoring severity and likelihood
- Audit Readiness Guide: Checklist of deliverables expected by professional auditors
- Vulnerability Taxonomy: Classification system aligned with industry standards
Who It's For
- Blockchain Protocol Engineers — Document security architecture before external audit
- Smart Contract Security Teams — Systematize threat modeling and risk assessment
- Web3 Security Leaders — Build comprehensive security documentation for governance and compliance
- Infrastructure Engineers — Map attack surfaces and dependencies in production deployments
- Audit-Prep Project Managers — Track deliverables and coordinate with security researchers
Best For
- Pre-audit preparation — Get documentation ready before professional auditors arrive
- Threat modeling workshops — Facilitate team discussions about potential vulnerabilities
- Security architecture reviews — Document design decisions and security properties for stakeholders
- Risk assessment and prioritization — Quantify and rank security concerns for roadmap planning
- Compliance and governance — Create auditable evidence of security diligence and due care
You might also like
You can analyze performance metrics from your applications to identify bottlenecks, automatically generate load test scripts tailored to your system architecture, and create detailed performance reports with actionable optimization recommendations. This skill processes performance data from various monitoring tools and transforms it into load testing strategies and optimization plans that your team can execute immediately.
This skill enables you to automatically audit your websites against compliance standards and detect deviations from expected baselines. You can track regulatory requirements, identify policy violations, and generate compliance reports with actionable remediation steps. Monitor multiple sites simultaneously and maintain detailed audit trails for compliance documentation.
Analyze chemical processes systematically to identify hazards, assess risks, and generate safety recommendations. You can perform HAZOP analyses, evaluate compliance with industry standards, conduct root-cause analysis of incidents, and develop emergency response procedures. The skill guides you through structured safety reviews that reduce the likelihood of accidents and regulatory violations.
You'll develop systematic approaches to injectable formulation design, from API selection through sterilization strategy. Claude helps you troubleshoot failed batches by analyzing root causes, recommends regulatory pathways (505(b)(2), ANDA, NDA), and provides science-backed solutions for stability, compatibility, and manufacturability challenges.
You can conduct comprehensive hazard analyses for chemical processes using industry-standard methodologies like HAZOP and LOPA. The skill helps you assess risks quantitatively, identify control gaps, design engineered safeguards, and generate formal documentation for regulatory compliance and process safety management.
Claude analyzes your code diffs and generates standardized commit messages that follow the Conventional Commits specification. The skill automatically determines the correct commit type, scope, and description based on the changes you've made, ensuring your messages are parseable by automation tools while remaining human-readable for code reviewers.
You can transform raw text into structured, labeled datasets for machine learning, analysis, and research. This skill performs named entity recognition, sentiment classification, part-of-speech tagging, and dependency parsing—generating consistent, validated annotations at scale. Use it to prepare corpora, extract entities, classify documents, or perform linguistic analysis without manual annotation.
Rapidly analyze firmware logs and diagnose hardware issues that cause device failures, connectivity problems, and performance degradation. You'll identify root causes from stack traces, crash dumps, and sensor data, then generate specific optimization recommendations. This skill transforms raw device logs into actionable debugging plans that reduce time-to-resolution from hours to minutes.