plamen
Autonomous multi-chain smart contract and node security auditing
All Skills in This Repository (47)
Pure Emerald Level Indicatorsfork-ancestry
Trace fork ancestry signals across Sui Move dependencies and source trees.
ability-analysis
Analyze Sui Move struct abilities to detect unauthorized transfer and ownership risks.
type-safety
Audit Sui Move modules for generic type and OTW safety risks.
centralization-risk
Assess centralization risk in Sui Move packages by analyzing privilege capabilities.
dependency-audit
Audit Move.toml dependencies for risk, immutability, and upgrade impact.
bit-shift-safety
Analyze unvalidated bit-shift operations in Sui Move code to prevent VM aborts.
token-flow-tracing
Trace Coin<T> and Balance<T> token flows in Sui Move protocols.
economic-design-audit
Analyze monetary parameter configurations in Sui Move protocols for boundary violations and invariant breaches.
oracle-analysis
Analyze Sui oracle integrations for staleness, decimal gaps, and failure modes.
migration-analysis
Analyze Sui package migrations for token transitions and object-layout changes.
ptb-composability
Assess PTB composability risks in Sui smart contracts.
share-allocation-fairness
Analyze fairness vulnerabilities in Sui share allocation mechanisms.
Frequently Asked Questions
FAQPage SchemaHow to install Plamen?βΌ
Run `npx skills add PlamenTSV/plamen --all -g -y` in your terminal to install all skills in this suite globally.
What blockchains does Plamen audit?βΌ
It audits smart contracts on EVM/Solidity, Solana/Anchor, Aptos Move, Sui Move, Soroban/Stellar, and DAML/Canton, plus L1 node clients written in Go or Rust.
How does Plamen find vulnerabilities?βΌ
It orchestrates 18 to 100 specialized agents across recon, breadth, depth, chain-analysis, and verification phases, then confirms findings with executable proof-of-concept tests before reporting them.
Does Plamen work with Claude Code and Codex?βΌ
Yes. It supports both the Claude Code CLI and the OpenAI Codex CLI as worker backends, with chain auto-detection and the same audit methodology on either.
Do I need security expertise to run an audit?βΌ
No. You run the `plamen` wizard, point it at a codebase, and it produces a severity-rated audit report with verified findings and suggested fixes.
Related Repositories in Software Engineering
View All in Software Engineeringβopenclaw
Run a personal AI assistant across your devices and chat apps
superpowers
Gives coding agents a disciplined workflow from idea to merged code
react
AI agent skills for building, testing, and porting React core