audit-depth-analysis

Analyze smart contract security audit leads with state trace and token flow analysis.

120|12|Updated Apr 10, 2026
One-click install
npx skills add https://github.com/ccashwell/evm-cortex --skill audit-depth-analysis
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit-depth-analysis
Source: https://github.com/ccashwell/evm-cortex/tree/main/skills/audit-depth-analysis
Command: npx skills add https://github.com/ccashwell/evm-cortex --skill audit-depth-analysis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Depth analysis addresses identified leads from breadth scans to thoroughly validate findings and uncover hidden risks in smart contract interactions.

Core Features & Use Cases

  • State Trace Analysis: trace state changes to detect ordering bugs and reentrancy risks.
  • Token Flow Tracing: map token movements to detect value leaks and invariant violations.
  • Edge Case Enumeration: systematically enumerate zero, min, max, first, last, and concurrent scenarios.
  • Cross-Contract Interaction Analysis: analyze trust boundaries and boundary conditions between Vault, Strategy, and external protocols.
  • Economic Incentive Analysis: evaluate profit potential and attack surface of incentives.

Quick Start

Identify a breadth-scan lead and generate a structured depth report detailing observation, hypothesis, analysis, PoC, and conclusion.

Frequently Asked Questions about audit-depth-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a deep security analysis on smart contract audit leads?

Deep security analysis validates audit leads by applying state trace analysis, token flow tracing, and cross-contract interaction checks to uncover hidden risks in smart contracts. It systematically evaluates edge cases and economic incentives to confirm vulnerabilities.

What is state trace analysis used for in smart contract security?

State trace analysis is used to track state changes within smart contracts, detecting ordering bugs and reentrancy risks. It maps execution paths to identify inconsistencies and ensure invariant logic holds during complex contract interactions.

How do I trace token flows to detect value leaks in smart contracts?

Token flow tracing maps token movements across contracts to detect value leaks and invariant violations. By analyzing transfer paths and balances, it identifies unauthorized extraction and ensures value remains within defined boundaries.

Can I analyze cross-contract interactions for trust boundary vulnerabilities?

Cross-contract interaction analysis examines trust boundaries and boundary conditions between Vault, Strategy, and external protocols. It identifies vulnerabilities arising from external calls and assumptions made across different smart contract layers.

How do I generate a structured depth report for a smart contract vulnerability?

Generate a structured depth report by detailing the observation, hypothesis, analysis, proof of concept, and conclusion for a vulnerability. Include severity and profitability evaluation to assess the economic impact and attack surface.

What edge cases should I enumerate when auditing smart contracts?

Enumerate zero, min, max, first, last, and concurrent scenarios to systematically uncover edge-case vulnerabilities in smart contracts. Testing these boundary conditions ensures the contract behaves correctly under extreme operational states.