skills.rest
mashharuki
mashharukiCOMMUNITY
Explore all skills by this author →
Website𝕏@haruki_web3GitHub

audit

Audit EVM smart contracts and file GitHub issues for medium-or-higher severity findings.

Updated Apr 8, 2026
Search Tags:#checklist#github#code-review#security-audit#evm#smart-contract-audit
One-click install
npx skills add https://github.com/mashharuki/flare-sample --skill audit-mashharuki
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/mashharuki/flare-sample/tree/main/.claude/skills/eth-audit
Command: npx skills add https://github.com/mashharuki/flare-sample --skill audit-mashharuki

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates deep, checklist-driven security audits of EVM smart contracts to surface subtle and non-obvious vulnerabilities and reduce manual review effort.

Core Features & Use Cases

  • Parallel specialist agents: dispatches domain-specific sub-agents to run simultaneous checks across 20 vulnerability domains.
  • Comprehensive checklists: covers proxies, ERC tokens, DeFi primitives, oracles, signatures, assembly, access control, DoS, flashloans, and more.
  • Synthesis & issue filing: consolidates findings into a single AUDIT-REPORT.md and files GitHub issues for medium-or-higher severity vulnerabilities.
  • Use Case: Use during pre-deployment reviews, third-party code audits, or bug-bounty triage to produce reproducible, checklist-backed findings.

Quick Start

Audit the contract at https://github.com/owner/repo/blob/main/contracts/Foo.sol and file GitHub issues for medium or higher severity findings.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a smart contract security audit for Solidity code?▼

You can audit EVM smart contracts by dispatching parallel specialist agents across 20 vulnerability domains, synthesizing results into an AUDIT-REPORT.md, and filing GitHub issues for medium or higher severity findings.

What types of EVM contracts can be checked for security vulnerabilities?▼

Security audits cover AMMs, bridges, ERC20/ERC721 tokens, proxies, oracles, and governance contracts, applying checklist-driven analysis to both Solidity source code and EVM-compatible bytecode.

Can I run a pre-deployment code review directly on a GitHub repository?▼

Yes, you can apply the audit directly to a GitHub repository URL. The process analyzes the contract, generates a consolidated report, and automatically files GitHub issues for vulnerabilities with medium or higher severity.

What is the best way to audit DeFi primitives and oracles for flashloan vulnerabilities?▼

The best way is using a checklist-driven approach that dispatches domain-specific sub-agents to run simultaneous checks across flashloans, oracles, DeFi primitives, and 17 other vulnerability domains.

Does this smart contract audit cover proxy patterns and access control?▼

Yes, the comprehensive checklist explicitly covers proxies, access control, signatures, assembly, DoS, and ERC tokens, ensuring deep analysis of these critical security domains during pre-deployment reviews and third-party audits.

Are there limitations to automated bytecode analysis for third-party code audits?▼

Automated audits satisfy checklist-driven analysis to surface subtle vulnerabilities, but they focus on EVM-compatible bytecode and Solidity. Findings are consolidated into reproducible reports for medium or higher severity issues.

Related Skills

Explore More Software Engineering Skills→
brucesongsbrucesongs
60

blockchain-web3

Identify and remediate security weaknesses in blockchain and Web3 contract code.

Community
Advanced
tawf-labstawf-labs
1

audit

Execute checklist-driven security audits of EVM smart contracts.

Official
Advanced
R2W1csR2W1cs
1

lint-and-validate

Lint and validate JavaScript and Python code for syntax and style issues.

Community
Intermediate
hairyfhairyf
4

foundry

Compile, test, and fuzz smart contracts with Foundry's Forge.

Community
Advanced