code-analysis

Map smart contract structures and trace execution flows for security auditing.

60|18|Updated Jan 21, 2026
One-click install
npx skills add https://github.com/PurpleAILAB/Vigilo --skill code-analysis-purpleailab
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-analysis
Source: https://github.com/PurpleAILAB/Vigilo/tree/main/packages/claude/skills/code-analysis
Command: npx skills add https://github.com/PurpleAILAB/Vigilo --skill code-analysis-purpleailab

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the initial reconnaissance phase of smart contract auditing by rapidly mapping code structure, identifying key functions, and tracing data flows, significantly speeding up the understanding of a codebase.

Core Features & Use Cases

  • Contract Structure Mapping: Identifies contracts, their inheritance, state variables, and entry points.
  • Execution Flow Tracing: Visualizes how value enters, moves through, and exits the protocol.
  • Protocol Type Classification: Determines if the contract is an AMM, Lending protocol, Vault, etc., based on code patterns.
  • Use Case: Quickly understand a new DeFi protocol's architecture by having the agent analyze its Solidity codebase, identify all deposit and withdrawal functions, and classify it as a Vault.

Quick Start

Analyze the provided Solidity smart contract code to identify all external functions and map the deposit and withdrawal flows.

Frequently Asked Questions about code-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate smart contract reconnaissance for a Solidity codebase?

Smart contract reconnaissance is automated by mapping contract structures, tracing execution flows, and classifying protocol types. It identifies entry points, state variables, and asset storage patterns to rapidly accelerate initial codebase understanding for security auditing.

What is execution flow tracing in smart contract auditing?

Execution flow tracing in smart contract auditing visualizes how value enters, moves through, and exits a protocol. It maps external functions and deposit flows to clarify the architecture and data paths of DeFi protocols.

Does this code analysis tool support Rust and Cairo smart contracts?

Yes, the code analysis supports Rust, Cairo, and Move smart contracts in addition to Solidity. It identifies notable code constructs and maps structures across these multiple languages for security auditing.

How do I classify a DeFi protocol type from its source code?

To classify a DeFi protocol type from source code, the Skill analyzes code patterns to determine if the contract is an AMM, Lending protocol, or Vault. This classification happens automatically during the codebase structure mapping process.

What is the best way to map contract inheritance and entry points?

Mapping contract inheritance and entry points is best handled by automating the reconnaissance phase of auditing. The process identifies contracts, their inheritance hierarchies, state variables, and external functions rapidly.