cairo-auditor

To perform a deterministic Cairo security audit, use a structured four-turn workflow with preflight checks, vector scans, and adversarial passes to identify and triage findings. This ensures repeatable preflight analysis and formal false-positive gating for Starknet contracts.

False-positive gating in a Starknet security audit is a formal review process that filters out incorrect findings. It uses prebuilt reference materials and judging criteria to ensure only valid, prioritized vulnerabilities are output for remediation.

To run an adversarial deep audit on a Cairo contract, load the deep workflow mode and apply parallel vector specialists with adversarial reasoning. This executes targeted attack-vector partitions to achieve deeper vulnerability coverage and structured reporting.

Yes, you can use targeted audit modes for specific Cairo vulnerability vectors. The workflow supports default, deep adversarial, and targeted modes, allowing you to load specific attack-vector partitions and apply specialized vector scans to the contract.

Yes, the Cairo audit workflow supports a Sierra confirmation workflow for upgrade and CEI findings when available. This integrates Sierra confirmation to validate specific findings during the structured reporting phase.