skills.rest
Atrium-Hermes
Atrium-HermesCOMMUNITY
Explore all skills by this author →
𝕏@atriumhermesGitHub

Contract Audit

Audit Base contracts for verification status, upgradeability, and admin powers.

Updated Jun 2, 2026
Search Tags:#security#ownership#compliance#onchain#base#upgradeability#contract audit
One-click install
npx skills add https://github.com/Atrium-Hermes/atrium-lighthouse --skill contract-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Contract Audit
Source: https://github.com/Atrium-Hermes/atrium-lighthouse/tree/main/skills/contract-audit
Command: npx skills add https://github.com/Atrium-Hermes/atrium-lighthouse --skill contract-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit Base contracts to verify source code, upgradeability, and admin powers, and to enumerate critical capabilities such as mint, pause, and drain in a live matrix.

Core Features & Use Cases

  • Source verification and metadata extraction for Base contracts.
  • Proxy/upgradeability assessment and detection of upgrade authority.
  • Ownership/admin role discovery and access control checks.
  • Live capability matrix generation, risk signaling, and audit logging.
  • Use cases include security reviews, governance audits, and regulatory compliance checks on Base deployments.

Quick Start

Provide a Base contract address to audit and run a live capability matrix assessment.

Frequently Asked Questions about Contract Audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Base contract for upgradeability and admin powers?▼

To audit a Base contract, provide a public contract address to assess its proxy upgradeability, verify source code, and discover admin roles. The audit generates a live capability matrix revealing critical functions like mint, pause, and drain.

What is a live capability matrix in a contract audit?▼

A live capability matrix is an assessment output that enumerates critical smart contract capabilities such as mint, pause, and drain. It maps these functions against risk signals during a security review to highlight active admin powers.

Can I check access control and ownership for public Base deployments?▼

Yes, you can check access control and ownership for public Base deployments by supplying a contract address. The audit discovers admin roles and verifies standard function selectors for owner, admin, and paused states.

Do I need contract source code availability to perform a compliance check?▼

Yes, contract source code availability is required to perform a compliance check and extract metadata. The audit also needs publicly accessible endpoints and standard function selectors to verify deployment status.

What are the limitations of auditing Base contracts for governance risks?▼

Limitations include reliance on publicly accessible endpoints and contract source code availability. Governance audits require standard function selectors for owner/admin/paused, meaning non-standard access control patterns may evade detection.

Related Skills

Explore More Software Engineering Skills→
Atrium-HermesAtrium-Hermes

Tx Explain

Decode Base transactions into plain-English narratives with risk flags.

Community
Advanced
gonzalezpazmonicagonzalezpazmonica
47

governance-enterprise

Orchestrate enterprise governance workflows for audit trails, compliance, and certifications.

Community
Advanced
pluginagentmarketplacepluginagentmarketplace
1

service-mesh

Configure and operate Istio and Linkerd service meshes on Kubernetes.

Community
Advanced
telihateliha

Smart Contract Security Audit

Audit Solidity smart contracts for security vulnerabilities and generate Markdown reports.

Official
Advanced