PurpleAILABOfficial·31 Agent Skills Included

Vigilo

Autonomous smart contract security audits with validated exploit proofs

Audits Solidity, Vyper, Cairo, and Rust smart contracts for vulnerabilities like reentrancy, oracle manipulation, flash loan attacks, and access control flaws. Deploys parallel specialist auditors that map code structure, extract protocol invariants, and write concrete attack scenarios. Generates and validates Foundry proof-of-concept tests, then produces submission-ready reports for Code4rena, Cantina, Sherlock, and Immunefi.

60|18

↗

npx skills add PurpleAILAB/Vigilo --all -g -y

All Skills in This Repository (31)

Pure Emerald Level Indicators

📦 In Repo

PurpleAILAB

poc

Generate and validate Foundry PoC tests from attack scenario documents.

vulnerability-base

Standardize smart contract vulnerability reporting with severity classification and quality checklists.

docs-analysis

Analyze project documentation to extract invariants and map trust assumptions.

code-analysis

Map smart contract structures and trace execution flows for security auditing.

audit

Automates full security audits for smart contracts, from scope to report.

report

Generate submission-ready audit reports from validated findings for Code4rena, Cantina, Sherlock, and Immunefi.

Lending Protocol Patterns

Analyze DeFi lending protocols for vulnerabilities using an audit checklist.

Staking Protocol Patterns

Audit DeFi staking and reward distribution mechanisms for common vulnerabilities.

ERC4626 Vault Patterns

Analyze Solidity smart contracts for ERC4626 vault vulnerabilities.

state-sync-analysis

Analyze Solidity smart contracts for state synchronization vulnerabilities and timing attacks.

invariant-analysis

Extract and analyze smart contract protocol invariants to identify violation paths.

asset-flow-analysis

Analyze Solidity smart contracts to map asset storage and movement paths.

Official

Advanced

Frequently Asked Questions

FAQPage Schema

How to install Vigilo?▼

Run `npx skills add PurpleAILAB/Vigilo --all -g -y` in your terminal to install all auditing skills globally.

What does Vigilo do?▼

Vigilo runs a full smart contract security audit pipeline: scope resolution, code reconnaissance, parallel specialist audits, proof-of-concept validation, and final report generation.

Which vulnerabilities can Vigilo detect?▼

It covers reentrancy, oracle manipulation, flash loan attacks, access control flaws, logic errors, token edge cases, cross-chain risks, and ERC4626 vault inflation attacks.

Does Vigilo work with Claude Code and OpenCode?▼

Yes. Vigilo ships as a plugin for both OpenCode and Claude Code, and all skills follow the universal SKILL.md standard.

Can Vigilo prove a vulnerability is real?▼

Yes. It auto-generates Foundry test files for each finding and only marks it validated when the test passes and proves the claimed impact.