mev-protection-guide SKILL.md skillA

mev-protection-guide from nirholas/three.ws is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add nirholas/three.ws/mev-protection-guide@git:20260501.87cefc9

Pins git:20260501.87cefc9 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
nirholas/three.ws
Path
data/skills/security/mev-protection-guide/SKILL.md
Versions recorded
1
Latest version
git:20260501.87cefc9, committed May 1, 2026
Size
5,145 bytes
Repository stars
269
License
Apache-2.0

Guide to MEV (Maximal Extractable Value) — sandwich attacks, frontrunning, backrunning, and how to protect transactions. Use when explaining MEV to users, recommending swap protection, or analyzing suspicious transaction patterns.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# MEV Protection Guide

MEV (Maximal Extractable Value) is profit that block builders and searchers extract by reordering, including, or excluding transactions. Understanding MEV helps protect your users' trades.

## Types of MEV

### 1. Sandwich Attacks

The most common MEV attack on DEX swaps:

```
1. Attacker sees your swap in mempool
2. Attacker buys before you (frontrun) → pushes price up
3. Your swap executes at a worse price
4. Attacker sells after you (backrun) → profits from the price difference
```

**Who gets hurt**: Anyone swapping on DEXs with high slippage tolerance
**Typical loss**: 0.3–2% of trade value

### 2. Frontrunning

A searcher copies your profitable transaction and submits it first with higher gas:
- Arbitrage opportunities
- NFT mints
- Liquidation calls

### 3. Backrunning

Searcher submits a transaction immediately after yours to capture resulting arbitrage:
- After large swaps (price impact creates arb opportunity)
- After oracle updates
- After liquidations

### 4. Just-In-Time (JIT) Liquidity

A sophisticated attack on V3 pools:
1. Searcher adds concentrated liquidity just before your swap
2. Your swap pays fees to the searcher's position
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add nirholas/three.ws/mev-protection-guide@sha256:b1f15c72c860eda6

The line at the top of this page pins the label git:20260501.87cefc9, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_abtg23al4bdan3oz.svg)](https://markdownregistry.com/a/art_abtg23al4bdan3oz)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on May 1, 2026.

versioncommittedcommitsizeaudit
git:20260501.87cefc9 latest2026-05-01 87cefc9 5,145 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (5145 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

nirholas/three.ws · 269 stars · license Apache-2.0 · pushed 2026-11-06 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_abtg23al4bdan3oz
GET https://markdownregistry.com/api/v1/resolve?ref=nirholas/three.ws/mev-protection-guide
GET https://markdownregistry.com/api/v1/blob/b1f15c72c860eda630e2c2386a08c169b39533c355a2d60b3a04ecaa90920716

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from nirholas/three.ws

anatomy SKILL.md skill
nirholas/three.ws · .agents/skills/anatomy/SKILL.md · Explain how a machine works as an interactive isometric 3D cutaway. Use when the user asks how an engine, turbine…
git:20261024.d553a25 · audit A · 269 stars
authenticate-wallet SKILL.md skill
nirholas/three.ws · .agents/skills/authenticate-wallet/SKILL.md · Sign in to the wallet. Use when you or the user want to log in, sign in, connect, or set up the wallet, or when any…
git:20261024.d553a25 · audit A · 269 stars
build-an-agent-skill SKILL.md skill
nirholas/three.ws · .agents/skills/build-an-agent-skill/SKILL.md · Write a real three.ws agent skill bundle (manifest.json + SKILL.md + tools.json + handlers.js) that gives a 3D agent a…
git:20261024.d553a25 · audit A · 269 stars
connect-three-ws-mcp SKILL.md skill
nirholas/three.ws · .agents/skills/connect-three-ws-mcp/SKILL.md · Connect any MCP client (Claude Code, Claude Desktop, the Agent SDK, or a custom one) to the three.ws MCP servers, so…
git:20261024.d553a25 · audit A · 269 stars
create-3d-avatar SKILL.md skill
nirholas/three.ws · .agents/skills/create-3d-avatar/SKILL.md · Turn a text prompt (or reference image) into a rigged, animation-ready 3D avatar (GLB). Use when you or the user want…
git:20261024.d553a25 · audit A · 269 stars
create-a-three-ws-agent SKILL.md skill
nirholas/three.ws · .agents/skills/create-a-three-ws-agent/SKILL.md · Create a real three.ws AI agent (identity, 3D body, custodial Solana wallet, persona) from the command line and get its…
git:20261024.d553a25 · audit A · 269 stars
embed-three-ws-avatar SKILL.md skill
nirholas/three.ws · .agents/skills/embed-three-ws-avatar/SKILL.md · Embed a live, animated three.ws 3D avatar in any website with the <agent-3d> web component. Use when you or the user…
git:20261024.453043b · audit B · 269 stars
find-3d-assets SKILL.md skill
nirholas/three.ws · .agents/skills/find-3d-assets/SKILL.md · Search thousands of ready-made 3D assets on three.ws (CC0 props and objects, rigged humanoid characters, motion clips)…
git:20261024.453043b · audit A · 269 stars
fund SKILL.md skill
nirholas/three.ws · .agents/skills/fund/SKILL.md · Add money to the wallet. Use when you or the user want to fund, deposit, top up, load, buy USDC, add funds, onramp, or…
git:20261024.453043b · audit A · 269 stars
gcp-triage SKILL.md skill
nirholas/three.ws · .agents/skills/gcp-triage/SKILL.md · Monitor three.ws production on Google Cloud Run and fix what the sweep finds. Use when the user asks to check…
git:20261024.d553a25 · audit A · 269 stars
generate-3d-model SKILL.md skill
nirholas/three.ws · .agents/skills/generate-3d-model/SKILL.md · Turn a text prompt into a downloadable, textured 3D model (GLB). Use when you or the user want to generate, create…
git:20261024.453043b · audit A · 269 stars
hire-an-agent SKILL.md skill
nirholas/three.ws · .agents/skills/hire-an-agent/SKILL.md · Find a three.ws agent that already does the job, then buy its skill or have one of your own agents hire and pay it…
git:20261024.d553a25 · audit A · 269 stars

Every file in nirholas/three.ws

Browse by kind, by grade A, or by owner.