Audit Context Building Skill

Build a pre-audit context documenting architecture, roles, token flows, and invariants.

56|9|Updated Jan 25, 2026
One-click install
npx skills add https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS --skill audit-context-building-skill
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Audit Context Building Skill
Source: https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS/tree/main/skills/audit-context-building
Command: npx skills add https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS --skill audit-context-building-skill

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Systematically build a comprehensive pre-audit understanding of a protocol before diving into code, preventing missed edge cases and misaligned assumptions during audits.

Core Features & Use Cases

  • Architecture mapping: contract inventory, inheritance, interactions, and dependencies.
  • Role and trust analysis: identify privileged roles and centralization risks.
  • Value flow and invariants: trace token flows, external dependencies, and protocol invariants.
  • Pre-audit workflows: Pre-Audit Context, Architecture Analysis, Deep Code Review to guide the audit.

Quick Start

Start by executing the Pre-Audit Context workflow to capture documentation, scope, and architecture mappings before code review.

Frequently Asked Questions about Audit Context Building Skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build pre-audit context for a DeFi protocol before code review?

To build pre-audit context, systematically map the architecture, identify privileged roles, trace token flows, and document invariants to prevent missed edge cases during the deep code review.

What is the best way to map multi-contract architectures for a Solidity audit?

The best way to map multi-contract architectures is creating a contract inventory that documents inheritance, interactions, and external dependencies to guide the security audit.

How do I identify centralization risks and privileged roles in protocol audits?

Identify centralization risks by performing a role and trust analysis to map privileged roles and evaluate trust assumptions across the protocol's multi-contract architecture.

Why do I need to document protocol invariants and value flows before a deep code review?

Documenting protocol invariants and value flows is needed to align assumptions and trace token movements accurately, preventing missed edge cases during the deep code review.

Can I evaluate unfamiliar DeFi protocols systematically before starting a security audit?

Yes, you can evaluate unfamiliar DeFi protocols by executing a pre-audit context workflow to capture documentation, define scope, and map dependencies before reviewing code.

What are the limitations of starting a Solidity audit without pre-audit context mapping?

Starting without pre-audit context mapping leads to misaligned assumptions and missed edge cases, as protocol invariants, role discovery, and value flows remain undocumented.