audit-recon

Automate initial audit reconnaissance for Solidity projects.

120|12|Updated Apr 10, 2026
One-click install
npx skills add https://github.com/ccashwell/evm-cortex --skill audit-recon
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit-recon
Source: https://github.com/ccashwell/evm-cortex/tree/main/skills/audit-recon
Command: npx skills add https://github.com/ccashwell/evm-cortex --skill audit-recon

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates initial security audit reconnaissance to provide a structured starting point for evaluating Solidity projects, reducing manual scoping time.

Core Features & Use Cases

  • Automated tooling guidance for recon of dependencies, architecture mapping, entry point identification, trust boundary delineation, external call enumeration, and access control analysis.
  • Use cases include security audits, threat modeling, and codebase onboarding for new auditors.

Quick Start

Begin with automated recon to produce an initial audit map for your Solidity project.

Frequently Asked Questions about audit-recon

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate initial security audit recon for a Solidity project?

Automate initial security audit recon by mapping dependencies, architecture, entry points, trust boundaries, external calls, and access controls across the Solidity codebase. This structured approach reduces manual scoping time and provides a starting point for threat modeling.

What is included in audit reconnaissance for smart contracts?

Audit reconnaissance for smart contracts includes dependency mapping, architecture delineation, entry point identification, trust boundary analysis, external call enumeration, and access control evaluation to produce an initial audit map.

How do I identify entry points and trust boundaries during a security audit?

Identify entry points and trust boundaries during a security audit by running automated reconnaissance that evaluates external calls and access controls across the Solidity codebase, outputting a structured map of the project's architecture.

Can I use automated recon for codebase onboarding as a new auditor?

You can use automated recon for codebase onboarding as a new auditor. The process maps dependencies and architecture to provide a structured starting point for evaluating Solidity projects and supports threat modeling workflows.

Does automated audit recon generate documentation templates for findings?

Automated audit recon satisfies requirements for audit-recon documentation templates by generating an initial audit map. This map structures the evaluation of dependencies, access controls, and external calls for the Solidity project.