0xweaksheep/aave-security-foundations
skills/aave-security-foundations/SKILL.md
Security baseline for AAVE integration and execution scripts. Use when user asks for AAVE security review, pre-trade checks, liquidation safety, allowance minimization, or execution hardening.
testing
Updated Mar 24, 2026
$ install --global
skillsauthnpx skillsauth add 0xweaksheep/aave_farmore aave-security-foundationsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Error
VirusTotalMulti-engine malware detection
70%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Mar 24, 2026, 2:58 PM42.4s3 files scanned
SKILL.md
- name:
- aave-security-foundations
- description:
- Security baseline for AAVE integration and execution scripts. Use when user asks for AAVE security review, pre-trade checks, liquidation safety, allowance minimization, or execution hardening.
- license:
- MIT
- author:
- AAVE AI Contributors
- version:
- 1.0.0
AAVE Security Foundations
Security-first checklist for AAVE script development and operations.
Threat Areas
- Over-approval risk: unlimited ERC20 approvals can expose wallet funds.
- Health factor drift: market volatility can liquidate leveraged positions quickly.
- Interest rate mode mismatch: stable mode assumptions can fail per asset.
- RPC/data inconsistency: stale or failing RPC can produce bad decisions.
- Execution race conditions: quote-time assumptions may be invalid at execution.
Required Pre-Execution Checks
- Validate chain/token/account/amount format.
- Read reserve status (
isActive,isFrozen,borrowingEnabled). - Read account health (
healthFactor,availableBorrowsBase). - Enforce HF safety threshold before
withdrawand aggressiveborrow. - Reject execution if allowance/balance preconditions fail.
References
references/audit-checklist.mdreferences/common-failures.md
Related Skills
0xweaksheep/aave-viem-integration
tools
VerifiedTrustedCommunity
Foundational EVM integration for AAVE-related scripts using viem. Use when user asks to read balances, read/write contracts, send transactions, or set up typed viem clients for Ethereum and Arbitrum.
SKILL.mdUpdated Mar 24, 2026
0xweaksheep/aave-risk-assessor
tools
VerifiedTrustedCommunity
This skill should be used when the user asks about "health factor", "liquidation risk", "aave risk", "will I be liquidated", "safe to borrow", "my account health", "collateral risk", "liquidation price", or wants to assess the risk of their AAVE V3 position. Calculates health factor, LTV ratios, liquidation thresholds, and provides risk level assessments for positions on Ethereum and Arbitrum.
SKILL.mdUpdated Mar 24, 2026
0xweaksheep/aave-planner
tools
VerifiedTrustedCommunity
This skill should be used when the user asks to "supply to aave", "deposit to aave", "lend on aave", "borrow from aave", "take loan on aave", "repay aave loan", "pay back aave", "withdraw from aave", "remove collateral", "aave lending", "earn yield on aave", or mentions AAVE V3 operations including supply, borrow, repay, or withdraw on Ethereum or Arbitrum.
SKILL.mdUpdated Mar 24, 2026
0xweaksheep/aave-integration
data-ai
VerifiedTrustedCommunity
This skill should be used when the user needs to interact with AAVE V3 protocol contracts directly, read on-chain data, get reserve configurations, fetch current APY rates, simulate position changes, or execute protocol operations programmatically. Provides low-level access to AAVE Pool contracts, UI Pool Data Provider, and quote generation for supply, borrow, repay, and withdraw operations on Ethereum and Arbitrum.
SKILL.mdUpdated Mar 24, 2026