
Security News
Feross on TBPN: How North Korea Hijacked Axios
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.
stacksagent
Advanced tools
AI Skill for building Stacks blockchain applications - Bitcoin's most powerful smart contract layer
An intelligent AI assistant that provides development guidance for Clarity smart contracts, DeFi integration, and blockchain development on Stacks. Works with Claude Code, Cursor, Windsurf, Antigravity, GitHub Copilot, Kiro, and Codex.
Highlights:
557+ Knowledge Base Entries Across 15 Domains:
# Install globally
npm install -g stacksagent
# Go to your project
cd /path/to/your/project
# Install for your AI assistant
stacksagent init --ai claude # Claude Code
stacksagent init --ai cursor # Cursor
stacksagent init --ai windsurf # Windsurf
stacksagent init --ai antigravity # Antigravity
stacksagent init --ai copilot # GitHub Copilot
stacksagent init --ai kiro # Kiro
stacksagent init --ai codex # OpenAI Codex
stacksagent init --ai all # All platforms
Copy the appropriate folders to your project:
| AI Assistant | Folders to Copy |
|---|---|
| Claude Code | .claude/skills/stacks-agent/ |
| Cursor | .cursor/commands/stacks-agent.md + .shared/stacks-agent/ |
| Windsurf | .windsurf/workflows/stacks-agent.md + .shared/stacks-agent/ |
| Antigravity | .agent/workflows/stacks-agent.md + .shared/stacks-agent/ |
| GitHub Copilot | .github/prompts/stacks-agent.prompt.md + .shared/stacks-agent/ |
| Kiro | .kiro/steering/stacks-agent.md + .shared/stacks-agent/ |
| Codex | .codex/skills/stacks-agent/ |
The skill activates automatically when you request Stacks development work, tag or mention the stacksagent
Create a meme token called PEPE with 1 billion supply @stacksagent
Use the slash command:
/stacks-agent Create a meme token called PEPE with 1 billion supply
Reference in chat:
@stacks-agent How do I swap tokens on Alex?
Basic Queries:
"Create a SIP-010 token with burn mechanism"
"Build an NFT collection with royalties"
"Audit this Clarity contract for security issues"
"Deploy my contract to testnet"
Production Code Examples (New in v2.0):
"Show me a complete working example of swapping tokens with slippage protection"
"How do I connect a wallet using the new @stacks/connect v7 API?"
"Give me production code for NFT marketplace listing"
"Show me how to integrate Pyth oracle for BTC/USD price"
"How do I implement JWT authentication with wallet signatures?"
"Show me a secure token transfer with post-conditions"
USDCx Bridging & Multi-DEX (New in v1.6.0):
"How do I bridge USDC from Ethereum to Stacks?"
"Show me how to swap USDCx to STX on Bitflow"
"How do I get quotes from Alex and Bitflow SDKs?"
"Build a multi-token swap using Bitflow router"
"What are the contract addresses for USDCx on mainnet?"
"Show me a two-step swap pattern: USDCx -> STX -> ALEX"
With Relationships:
"What are the dependencies for implementing a token swap?"
"Show me all security patterns related to NFT marketplace"
"What JavaScript SDK functions implement Clarity stacking?"
The skill includes a powerful BM25-based search engine:
# Auto-detect domain
python3 .claude/skills/stacks-agent/scripts/search.py "define-public"
# Search specific domain
python3 .claude/skills/stacks-agent/scripts/search.py "swap tokens" --domain defi
# Get more results
python3 .claude/skills/stacks-agent/scripts/search.py "security" --domain security -n 10
# JSON output
python3 .claude/skills/stacks-agent/scripts/search.py "stx transfer" --domain stacksjs -f json
Available domains:
clarity - Syntax and functionstemplates - Contract templatessecurity - Security patternsdefi - DeFi protocols (swaps, liquidity, stacking, oracles)nfts - NFT operations (minting, marketplace, royalties)tokens - Token operations (SIP-010, vesting, allowances)auth - Authentication (wallet connect, JWT, sessions)stacksjs - JavaScript snippetsbns - BNS operationsstacking - Stacking guidesdeployment - Deployment stepsauto - Auto-detect (default)Search 40 complete, production-tested code examples extracted from live dApps:
# Search examples
python3 .claude/skills/stacks-agent/scripts/search.py "how to swap" --examples
# Filter by domain
python3 .claude/skills/stacks-agent/scripts/search.py "marketplace" --domain nfts --examples
# Filter by difficulty
python3 .claude/skills/stacks-agent/scripts/search.py "token" --difficulty beginner --examples
# Search specific example type
python3 .claude/skills/stacks-agent/scripts/search.py "debug" --example-type debugging
DeFi (10 examples):
NFT (10 examples):
Tokens (8 examples):
Security (7 examples):
Auth (5 examples):
Each example includes:
100 relationships connect concepts across domains:
# Get related entries for top results
python3 .claude/skills/stacks-agent/scripts/search.py "swap tokens" --include-relationships
# Export relationship graph
python3 -c "from scripts.relationships import get_graph; print(get_graph().export_graph('mermaid'))"
Search: "name-to-address"
Result: bns:1 - name-to-address function
📚 Related Entries:
[requires] clarity-syntax:59 (strength: 10) - Uses contract-call?
[javascript-for] bns:12 (strength: 10) - SDK implements resolution
[uses] security-patterns:1 (strength: 8) - Needs access control
Types, functions, control flow, arithmetic, comparisons, maps, tokens, STX operations
Alex, Velar, Bitflow, Zest, StackingDAO, Boost, Faktory integration patterns
Bridge Operations:
Multi-DEX Swap Routing:
swap-helper-a/b/c for 2/3/4-hop swapsswap-helper, swap-helper-a with factorspath-apply with tuple-based routingQuote APIs:
getQuoteForRoute()getAmountTo() with Currency enumsContract Addresses:
| Contract | Address |
|---|---|
| USDCx | SP120SBRBQJ00MCWS7TM5R8WJNTTKD5K0HFRC2CNE.usdcx |
| Bitflow Router | SM1793C4R5PZ4NS4VQ4WMP7SKKYVH8JZEWSZ9HCCR.router-stableswap-xyk-multihop-v-1-2 |
| Alex AMM | SP102V8P0F7JX67ARQ77WEA3D3CFB5XW39REDT0AM.amm-pool-v2-01 |
| Velar | SP20X3DC5R091J8B6YPQT638J8NR1W83KN6TN5BJY.path-apply_staging |
Wallet connection, transactions, Clarity values, API calls, post-conditions
Name resolution, registration, transfer, updates
Direct stacking, delegation, pools, rewards
Testnet, mainnet, devnet workflows with Clarinet
All generated contracts include:
tx-sender validation)try!, unwrap!)asserts!)python3 --version
node --version
Contributions are welcome! Please:
MIT License - see LICENSE file for details
Built for the Stacks community with:
Made with ❤️ for the Stacks community
Build Bitcoin-secured dApps with AI assistance
FAQs
AI Skill for building Stacks blockchain applications - CLI installer
We found that stacksagent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.

Security News
OpenSSF has issued a high-severity advisory warning open source developers of an active Slack-based campaign using impersonation to deliver malware.

Research
/Security News
Malicious packages published to npm, PyPI, Go Modules, crates.io, and Packagist impersonate developer tooling to fetch staged malware, steal credentials and wallets, and enable remote access.