GitHub - ccashwell/evm-cortex: Ethereum protocol engineering squad for AI coding assistants

EVM Cortex

Ethereum protocol engineering squad for AI coding assistants.

50 agents, 95 skills, 19 hooks, and 15 rules covering Solidity development, security auditing, DeFi integration, smart contract testing, and deployment — everything needed to build, audit, and ship smart contracts.

Install

Claude Code

git clone https://github.com/ccashwell/evm-cortex.git

cd evm-cortex

./install.sh

Codex CLI

git clone https://github.com/ccashwell/evm-cortex.git

cd evm-cortex

./install-codex.sh

Cursor

git clone https://github.com/ccashwell/evm-cortex.git

cd evm-cortex

./install-cursor.sh

OpenClaw

git clone https://github.com/ccashwell/evm-cortex.git

cd evm-cortex

./install-openclaw.sh

Or zero-copy (add to ~/.openclaw/openclaw.json ):

{ "skills" : { "load" : { "extraDirs" : [ "/path/to/evm-cortex/skills" ] } } }

Updating

cd evm-cortex

git pull origin main

./install.sh --update

--update is required. Without it the installer only adds files you don't have yet and leaves everything else at its installed version, so an upgrade would bring in new skills but not changes to existing ones.

Running without it is still safe and will tell you which of your files are out of date.

--update backs up ~/.claude/{agents,skills,hooks,rules} first and replaces only the files EVM Cortex ships — agents and skills you created yourself are untouched. See UPGRADING.md for details.

Prerequisites

Tool Install Required

Foundry

curl -L https://foundry.paradigm.xyz | bash && foundryup

Yes

Slither

pip install slither-analyzer

Recommended

Aderyn

cargo install aderyn

Optional

Node.js 18+ nodejs.org For hooks and fizz

Medusa install guide For fizz

Echidna install guide For fizz

fizz stops early without Medusa, since it drives the coverage loop. Echidna is optional for a first run but expected for the full workflow — it gives a complementary second campaign over the same harness.

What's Inside

50 Agents

Squad Agents

Core Protocol (6) solidity-architect solidity-engineer gas-optimizer contract-deployer storage-layout-analyst protocol-designer

Security (10) audit-orchestrator access-control-reviewer depth-state-trace depth-token-flow depth-edge-case depth-external mev-analyst poc-writer security-verifier sleuth

Testing (5) foundry-tester invariant-analyst invariant-tester formal-verifier fuzzer

DeFi (8) amm-expert lending-expert oracle-analyst oracle-expert bridge-expert tokenomics-analyst yield-strategist defi-architect

Uniswap (5) uniswap-v3-expert uniswap-v4-expert uniswap-math-expert lp-analyst pool-finder

Tooling (6) foundry-expert openzeppelin-expert slither-analyst subgraph-builder dapp-frontend devops-chain

Standards (5) eip-expert erc-implementer upgrade-planner governance-designer l2-specialist

Cross-Cutting (5) planner code-reviewer scout scribe verifier

95 Skills

Category Skills

Solidity Dev (13) solidity-patterns type-driven-design gas-optimization storage-layout assembly-patterns error-handling event-design interface-design natspec-standards library-patterns immutable-constants constructor-patterns solidity-security

Security (15) reentrancy-patterns flash-loan-attacks oracle-manipulation access-control-patterns signature-vulnerabilities front-running-patterns integer-overflow delegate-call-risks denial-of-service cross-chain-security upgrade-safety token-integration-safety economic-attack-vectors governance-attacks time-manipulation

DeFi (12) uniswap-v4-hooks aave-integration compound-patterns curve-integration chainlink-oracles flash-loan-usage yield-vault-patterns staking-reward-patterns governance-patterns liquidity-mining token-bonding-curves dutch-auction-patterns

Uniswap (6) uniswap-v4-testing uniswap-v4-expert uniswap-v3-expert uniswap-math lp-analyst pool-finder

Testing (11) foundry-testing invariant-testing formal-verification fork-testing gas-snapshot-testing coverage-analysis fuzzing-patterns test-fixtures fizz fizz-sync fizz-convert

Audit (9) audit-prep audit-recon audit-breadth-scan audit-depth-analysis audit-verification audit-report-generation pashov-audit-pipeline simao-audit-pipeline xray-pre-audit

Standards (12) erc20-patterns erc721-patterns erc1155-patterns erc4626-patterns erc7702-patterns erc8004-patterns eip712-signing create2-patterns proxy-patterns minimal-proxy diamond-pattern beacon-proxy

Stablecoins (2) usdc-integration cctp-bridging

Tooling (8) foundry-setup slither-analysis aderyn-analysis cast-commands anvil-patterns forge-scripting contract-verification blockscout-mcp

Infrastructure (7) subgraph-patterns dapp-frontend-patterns wallet-integration l2-deployment multichain-deployment ipfs-deployment scaffold-eth-patterns

19 Hooks

Hook Trigger

agent-memory-loader Session start

agent-memory-saver Session end

bash-audit-log Shell command

credential-deny Shell command

forge-compile-check File save

gas-snapshot-diff File save

memory-awareness Session start

natspec-enforcer File save

passive-learner Session end

pre-compact-continuity Context compact

sast-on-edit File save

session-analytics Session end

session-end-cleanup Session end

session-outcome Session end

session-register Session start

session-start-continuity Session start

slither-on-save File save

storage-layout-check File save

transcript-parser Session end

15 Rules

solidity-style-guide security-first foundry-workflow gas-consciousness audit-mindset severity-matrix finding-output-format decimal-awareness evm-current-state onchain-conventions contract-addresses upgrade-safety-rules test-before-deploy report-template poc-execution

Recommended MCP Servers

Server Purpose

OpenZeppelin MCP Contract generation

Blockscout MCP Onchain data queries

Slither MCP Static analysis

Key Principles

Security first. Checks-effects-interactions. ReentrancyGuard. SafeERC20. Never trust external calls.

Foundry workflow. TDD with forge test. Gas snapshots for regression. Slither before merge.

Audit mindset. Write code as if it will be audited tomorrow. Document invariants. Test edge cases.

Current knowledge. Gas is under 1 gwei (2026). Foundry is the default toolchain. EIP-7702 is live. Say "onchain" not "on-chain".

Acknowledgments

Built on knowledge from:

• ethskills.com — Ethereum knowledge corrections for AI agents

• Plamen — Autonomous audit pipeline architecture

• OpenZeppelin Skills — Secure contract development

• evmresearch.io — EVM security research

• Circle Skills — USDC and CCTP integration patterns

• Pashov Skills — Audit methodology and fuzz suite generation ( pashov-audit-pipeline , xray-pre-audit , and fizz vendor upstream code directly)

• 0xSimao AI — Accounting-first audit methodology ( simao-audit-pipeline vendors its references/ intact, bar the onchain spelling normalization)

License

MIT

— 本文由 AI 根据公开来源辅助整理，命令、版本与许可证请在使用前到原始页面复核。