audit-prep

Run 8-phase pre-audit readiness checks on Solidity projects and generate scored reports.

43|7|Updated Mar 27, 2026
One-click install
npx skills add https://github.com/CDSecurity/cdsecurity-skills --skill audit-prep-cdsecurity
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit-prep
Source: https://github.com/CDSecurity/cdsecurity-skills/tree/main/audit-prep
Command: npx skills add https://github.com/CDSecurity/cdsecurity-skills --skill audit-prep-cdsecurity

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill eliminates the tedious, time-consuming pre-audit preparation work for Solidity smart contract projects, freeing development teams to focus on building and auditors to focus on finding real vulnerabilities instead of chasing missing documentation, untested code, or hygiene issues.

Core Features & Use Cases

  • 8-Phase Automated Readiness Checks: Covers test coverage, test quality, NatSpec documentation, code hygiene, dependency health, best practice enforcement, deployment readiness, and project documentation completeness.
  • Scored Actionable Reports: Generates clear, prioritized reports with pass/fail status and specific fix recommendations for every finding, plus an overall audit readiness score.
  • Multi-Framework Support: Works with both Foundry and Hardhat Solidity projects, with optional auto-fixes for common issues like floating pragmas, missing NatSpec stubs, and unsafe ERC20 calls.
  • Use Case: A DeFi team preparing their lending protocol for a security audit can run this skill to identify gaps like missing deploy scripts, untested contracts, and missing trust assumptions before the audit begins, ensuring auditors can focus on critical bugs instead of administrative follow-ups.

Quick Start

Use the audit-prep skill to run a complete 8-phase audit readiness check on your Solidity project and receive a scored report with prioritized actionable fixes.

Frequently Asked Questions about audit-prep

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prepare my Solidity smart contracts for a security audit?

Prepare Solidity smart contracts for a security audit by running an 8-phase automated readiness check covering test coverage, NatSpec documentation, code hygiene, and deployment readiness to generate a scored report with prioritized fixes.

Does audit-prep work with Foundry and Hardhat projects?

Yes, audit-prep supports both Foundry and Hardhat Solidity projects, applying readiness checks and providing optional auto-fixes for common issues like floating pragmas and missing NatSpec stubs across both frameworks.

What is included in a pre-audit readiness check for smart contracts?

A pre-audit readiness check for smart contracts includes 8 phases of validation covering test coverage, test quality, NatSpec documentation, code hygiene, dependency health, best practice enforcement, deployment readiness, and project documentation completeness.

Can I integrate audit readiness checks into my CI pipeline?

Yes, you can integrate audit readiness checks into your CI pipeline using the skill's CI-compatible JSON output, allowing automated validation of Solidity project audit readiness during development workflows.

How do I automate fixing missing NatSpec and floating pragmas in Solidity?

Automate fixing missing NatSpec stubs, floating pragmas, and unsafe ERC20 calls by running the audit-prep skill, which provides optional auto-fixes for these common Solidity code hygiene issues.

Why should I run a pre-audit report before hiring a smart contract auditor?

Run a pre-audit report before hiring a smart contract auditor to eliminate manual preparation work, ensuring auditors focus on finding critical vulnerabilities instead of chasing missing documentation, untested code, or basic hygiene issues.