compact-core:compact-review

Review Compact smart contracts and TypeScript witnesses for security and correctness.

37|9|Updated Feb 25, 2026
One-click install
npx skills add https://github.com/devrelaicom/midnight-expert --skill compact-core-compact-review
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: compact-core:compact-review
Source: https://github.com/devrelaicom/midnight-expert/tree/main/plugins/compact-core/skills/compact-review
Command: npx skills add https://github.com/devrelaicom/midnight-expert --skill compact-core-compact-review

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Provides a structured, checklist-driven process to audit Compact smart contracts, TypeScript witness implementations, and related tests so reviewers can find privacy leaks, security defects, correctness issues, and documentation gaps efficiently.

Core Features & Use Cases

  • Category-driven checklists: Ten focused review categories (privacy, security, token economics, concurrency, compilation, performance, architecture, code quality, testing, documentation) to ensure comprehensive coverage.
  • Mechanical verification: Guidance to run mechanical verification (/midnight-verify:verify) for compilation, type safety, and witness consistency and to include those results in reports.
  • Actionable output: Standardized finding format grouped by severity with clear problem, impact, and fix recommendations plus Positive Highlights to summarize strengths.
  • Use Case: Use during pull requests or security audits to produce a repeatable, evidence-based code review that cites Merkle/ADT usage, disclose() placement, and pure-circuit candidates.

Quick Start

Ask the skill to review a Compact contract and produce checklist findings grouped by severity, including verification results from /midnight-verify:verify.

Frequently Asked Questions about compact-core:compact-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a Compact smart contract for privacy leaks and security defects?

A Compact smart contract review covers privacy, security, cryptographic correctness, performance, and documentation by applying ten category-specific checklists to identify leaks, defects, and gaps across contract code, TypeScript witnesses, and tests.

How do I check Midnight witness consistency and compilation during a code review?

You check Midnight witness consistency by running mechanical verification during the code review to validate compilation, type safety, and witness implementation, then including those verification results in the final audit report.

Does the Compact contract review process verify disclose() placement and pure-circuit candidates?

Yes, the Compact contract review process verifies disclose() placement and identifies pure-circuit candidates, citing these structural details within a standardized finding format grouped by severity alongside clear impact and fix recommendations.

What is the best way to audit Compact smart contracts and TypeScript witness implementations together?

The best way to audit Compact smart contracts and TypeScript witnesses together is using a structured checklist-driven process that evaluates cryptographic correctness, concurrency, and architecture across both file types to find privacy leaks and security defects efficiently.

Can I use a standardized checklist for Compact smart contract pull requests?

You can use a standardized category-driven checklist for Compact smart contract pull requests to ensure comprehensive review coverage across ten categories including privacy, security, performance, and documentation, producing repeatable evidence-based findings.

When do I need mechanical verification for Compact smart contract code reviews?

Mechanical verification for Compact smart contract code reviews is needed during audits and pull requests to validate compilation, type safety, and witness consistency, ensuring that the review report contains evidence-based verification results.