defi-amm-security SKILL.md skillA
defi-amm-security from affaan-m/ecc is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add affaan-m/ecc/defi-amm-security@git:20260517.ec9ace9Pins git:20260517.ec9ace9 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- affaan-m/ecc
- Path
docs/ja-JP/skills/defi-amm-security/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260517.ec9ace9, committed May 17, 2026
- Size
- 1,742 bytes
- Repository stars
- 299,696
- License
- MIT
DeFi自動マーケットメーカー（AMM）スマートコントラクトセキュリティ監査パターン。フラッシュローン、スリッページ、サンドイッチング攻撃、価格操作、再入攻撃、不正確な整数演算をカバー。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# DeFi AMM セキュリティ 自動マーケットメーカー（AMM）スマートコントラクトのセキュリティパターンと監査チェックリスト。 ## 使用時期 - Uniswap、Curve、BalancerなどのようなAMMコントラクトをレビュー - スワップ関数、ミント、バーンロジックでセキュリティの問題を検出 - フラッシュローン、価格操作脆弱性を特定 - DeFiプロトコルの経済セキュリティをテスト ## 一般的な脆弱性 ### 1. フラッシュローン攻撃 ローンが同一ブロック内で返却されたと仮定するコントラクトを攻撃。 ### 2. スリッページ不足 ユーザーが予期しない不利な価格変更を受ける。 ### 3. 再入攻撃 外部呼び出し後の状態チェック。 ### 4. 価格操作 オンチェーン価格参照の信頼不足。 ## セキュリティチェックリスト - [ ] すべての価格参照はオラクルから取得 - [ ] フラッシュローンは考慮（価格を信頼しない） - [ ] スリッページ保護が実装 - [ ] チェック・エフェクト・相互作用パターン使用 - [ ] 再入保護（ミューテックス/チェック付き） - [ ] 整数オーバーフロー/アンダーフロー処理 - [ ] アクセス制御とロール分離 詳細については、ドキュメントを参照してください。
Read the whole file at its exact version.
How to install
mdr add affaan-m/ecc/defi-amm-security@sha256:237a55d4b80db63cThe line at the top of this page pins the label git:20260517.ec9ace9, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_cifnu7cwzgk2ua5p)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on May 17, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (1742 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
affaan-m/ecc · 299,696 stars · license MIT · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_cifnu7cwzgk2ua5p GET https://markdownregistry.com/api/v1/resolve?ref=affaan-m/ecc/defi-amm-security GET https://markdownregistry.com/api/v1/blob/237a55d4b80db63c231938cc67c2c72aedebb2c06682aa22f75d2fd378d7cc6a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.