skills.rest
collat-labs
collat-labsOFFICIAL
Explore all skills by this author →
GitHub

audit

Run parallel domain-specific checklist agents to audit EVM smart contracts and synthesize a consolidated report.

1|Updated Apr 25, 2026
Search Tags:#vulnerability discovery#security review#evm#defi security#smart contract auditing#github issue filing#checklist-based testing
One-click install
npx skills add https://github.com/collat-labs/collat --skill audit-collat-labs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/collat-labs/collat/tree/main/.agents/skills/ethskills/audit
Command: npx skills add https://github.com/collat-labs/collat --skill audit-collat-labs

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill reduces the risk of missing subtle smart contract vulnerabilities by providing a structured, repeatable EVM security audit workflow that turns contract reading into actionable findings and GitHub issues.

Core Features & Use Cases

  • Parallelized domain checklists: Routes the audit through multiple specialized checklist skills (math, ERC standards, proxies, oracles, DoS, access control, etc.) to cover a broad vulnerability surface.
  • Methodical audit outputs: Produces per-domain findings and synthesizes them into a consolidated audit report suitable for remediation planning.
  • Issue filing workflow: Creates GitHub issues for medium severity and above findings to drive engineering action.

What problem does it solve?

Audit requests for EVM contracts that you did not write benefit most when you need fast, comprehensive security coverage across many common (and non-obvious) failure modes.

Quick Start

Ask the AI: Audit this contract and file GitHub issues for medium severity and above at https://github.com/owner/repo/blob/main/contracts/Foo.sol.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit EVM smart contracts for security vulnerabilities?▼

Auditing EVM smart contracts is done by routing the codebase through parallel domain-specific checklist agents that cover DeFi, token, oracle, and access-control scenarios to generate a consolidated security report.

What is checklist-based testing for DeFi security reviews?▼

Checklist-based testing in DeFi security uses specialized domain checklists to evaluate failure modes across math, proxies, and access control, converting contract reading into actionable findings artifacts.

Can I automatically file GitHub issues for smart contract audit findings?▼

Yes, you can automatically file GitHub issues for smart contract audit findings. The workflow creates GitHub issues for any discovered vulnerabilities meeting a medium severity threshold or above.

Does this security review workflow cover proxy and oracle failure modes?▼

Yes, this security review workflow covers proxy and oracle failure modes by routing the audit through specialized checklist skills that target these specific EVM vulnerability surfaces.

What is the best way to systematically review unknown EVM contracts?▼

The best way to review unknown EVM contracts is using a structured, repeatable audit workflow that applies parallel domain checklists to cover broad vulnerability surfaces and generates remediation planning outputs.

How are vulnerability discoveries synthesized for remediation planning?▼

Vulnerability discoveries are synthesized by consolidating per-domain findings into a single audit report, which then drives an issue filing workflow for medium severity and above findings to trigger engineering action.

Related Skills

Explore More Software Engineering Skills→
SomehowLivingSomehowLiving

search-algorand-examples

Search GitHub for Algorand smart contract examples and usage patterns.

Community
Intermediate
cropsggcropsgg
15

triage

Assign type, priority, reproduction status, and routing to GitHub issues.

Community
Intermediate
tawf-labstawf-labs
1

security

Mitigate smart contract risks with defensive Solidity patterns and a pre-deploy audit checklist.

Official
Advanced
Canhada-LabsCanhada-Labs
2

blockchain-security-audit

Identify security vulnerabilities in EVM smart contracts and DeFi protocols.

Official
Advanced