audit-prep-assistant

Automate static analysis, test coverage assessment, and documentation generation for security audits.

Updated Nov 23, 2025
One-click install
npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill audit-prep-assistant-manuelbrandner85
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit-prep-assistant
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/audit-prep-assistant
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill audit-prep-assistant-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the high friction and lack of preparation often found before security audits, ensuring your codebase is clean, documented, and ready for professional review.

Core Features & Use Cases

  • Automated Static Analysis: Orchestrates tools like Slither, Dylint, and golangci-lint to identify vulnerabilities early.
  • Documentation Generation: Automatically creates flowcharts, user stories, and glossaries to provide auditors with necessary context.
  • Use Case: Use this tool two weeks before a scheduled smart contract audit to identify dead code, increase test coverage, and generate a comprehensive audit preparation package that reduces review time and costs.

Quick Start

Invoke the audit prep assistant to begin the security review preparation process for the current project directory.

Frequently Asked Questions about audit-prep-assistant

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prepare my codebase for a security audit?

Preparing for a security audit requires automating static analysis, assessing test coverage, locking dependencies, and generating documentation. This ensures your codebase is clean, hardened, and ready for professional review.

What is static analysis in smart contract security audits?

Static analysis in smart contract security is the automated review of source code to identify vulnerabilities early. Tools like Slither, Dylint, and golangci-lint scan the codebase to detect issues such as dead code before an external audit begins.

Does audit preparation require automated documentation generation?

Audit preparation requires automated documentation generation to provide external auditors with necessary architectural context. Automatically creating flowcharts, user stories, and glossaries helps reviewers understand the system and reduces overall review time.

Can I use static analysis tools like Slither and golangci-lint for audit readiness?

You can use static analysis tools like Slither, Dylint, and golangci-lint to achieve audit readiness by orchestrating automated vulnerability detection. These tools help identify security flaws and dead code early in the development lifecycle.

What is the best way to harden code before an external review?

The best way to harden code before an external review is to automate vulnerability triage, enforce build verification, and assess test coverage. Generating a comprehensive audit preparation package reduces external review time and costs.

When should I start vulnerability triage for a scheduled compliance audit?

You should start vulnerability triage for a scheduled compliance audit at least two weeks in advance. Beginning early allows you to identify dead code, increase test coverage, and generate comprehensive documentation for the auditors.