audit-context-building

Inspects code line-by-line to build a persistent mental model for security audits.

Updated Jul 10, 2025
One-click install
npx skills add https://github.com/Superlend/superloop-core-contracts --skill audit-context-building
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit-context-building
Source: https://github.com/Superlend/superloop-core-contracts/tree/main/.cursor/skills/audit-context-building/skills/audit-context-building
Command: npx skills add https://github.com/Superlend/superloop-core-contracts --skill audit-context-building

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the challenge of insufficient, deeply contextual understanding at the outset of security audits by enabling ultra-granular, line-by-line code analysis to construct a precise mental model of the system.

Core Features & Use Cases

  • Ultra-granular analysis: Inspect code by lines and blocks to surface invariants, flows, and edge cases.
  • Structured reasoning: Apply First Principles, 5 Whys, and 5 Hows to reveal root causes and dependencies.
  • Global context maintenance: Build and continuously update a persistent mental model linking functions, modules, and system behavior.
  • Pre-audit readiness: Utilize during architecture reviews, threat modeling, and vulnerability-hunting preparation.

Quick Start

  1. Load the audit-context-building skill and enable ultra-granular analysis mode.
  2. Point it at the target codebase or contracts to generate a micro-analysis scaffold.
  3. Review the resulting per-function analyses and incorporate them into your audit plan.

Frequently Asked Questions about audit-context-building

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a stable mental model for a smart contract security audit?

Build a stable mental model for a smart contract security audit by performing ultra-granular, line-by-line code analysis to surface invariants, assumptions, and cross-function dependencies. This establishes the deep contextual understanding required before vulnerability hunting.

What is the best way to prepare for threat modeling and architecture reviews?

The best way to prepare for threat modeling and architecture reviews is applying structured reasoning like First Principles and 5 Whys during code analysis. This reveals root causes and dependencies, outputting explicit risks for pre-audit readiness.

How do I start a vulnerability hunting preparation phase in a new codebase?

Start vulnerability hunting preparation in a new codebase by enabling ultra-granular analysis mode, pointing it at the target contracts, and generating a per-function micro-analysis scaffold to review for edge cases and flows.

Does ultra-granular code analysis work for maintaining global context across modules?

Yes, ultra-granular code analysis works for maintaining global context by continuously updating a persistent mental model that links functions, modules, and system behavior across the entire codebase during security audits.

Why do I need line-by-line code analysis instead of high-level reviews for vulnerability hunting?

You need line-by-line code analysis for vulnerability hunting because high-level reviews lack the deep contextual understanding required to surface complex edge cases, hidden invariants, and cross-function dependencies effectively.