One-click install
npx skills add https://github.com/tawf-labs/zkt-hackathon --skill audit-tawf-labs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/tawf-labs/zkt-hackathon/tree/main/.agents/skills/ethskills/audit
Command: npx skills add https://github.com/tawf-labs/zkt-hackathon --skill audit-tawf-labs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill eliminates the uncertainty of whether an unfamiliar smart contract is secure by running a structured, checklist-driven audit workflow that finds issues and prepares actionable reports.

Core Features & Use Cases

  • Parallelized domain checklists: Runs multiple specialist audit checklists across key vulnerability areas (e.g., access control, math precision, proxies, signatures, DoS).
  • Repeatable evidence-based findings: Produces per-skill findings files following a standardized format and severity scheme.
  • GitHub issue filing workflow: Helps you translate audit results into Medium-severity-or-higher issues for remediation tracking.

Quick Start

Ask the AI to audit the target Solidity contract at your GitHub URL, then instruct it to fetch the master audit checklist and run the relevant sub-skills to produce a synthesized audit report and security issues.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit EVM smart contracts for security vulnerabilities?

EVM smart contract auditing runs a checklist-driven, multi-domain pipeline to identify security vulnerabilities, assess severity, and generate remediation-ready findings for unfamiliar contract code.

What is checklist-driven security review for Solidity contracts?

Checklist-driven security review applies parallelized specialist audit checklists across key vulnerability areas like access control, math precision, proxies, signatures, and DoS to produce repeatable evidence-based findings.

How do I file GitHub issues for smart contract audit findings?

You can translate audit results into GitHub issues for vulnerabilities meeting a Medium-severity-or-higher threshold, producing structured tracking items for code remediation directly from the synthesized audit report.

Can I use this to audit ZK smart contracts?

Yes, the audit pipeline supports ZK smart contract code review by fetching a master routing methodology, selecting appropriate domain skills, and running parallel specialist agents to synthesize vulnerability findings.

Does this smart contract audit workflow require any dependencies or external tools?

No external dependencies are required to run the EVM smart contract audit workflow; it internally fetches the master routing methodology, selects domain skills, and executes parallel specialist agents to produce the audit report.

What's the best way to review unfamiliar smart contract code for risks?

The best way to review unfamiliar smart contract code is running a structured audit workflow that applies parallelized domain checklists across vulnerability areas like access control and math precision, synthesizing results into actionable reports.