dojo-review

Identify security, design, and performance issues in Dojo Cairo codebases.

1|Updated Mar 7, 2026
One-click install
npx skills add https://github.com/shariqazeem/Prophecy-Roguelite --skill dojo-review-shariqazeem
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dojo-review
Source: https://github.com/shariqazeem/Prophecy-Roguelite/tree/main/.agents/skills/dojo-review
Command: npx skills add https://github.com/shariqazeem/Prophecy-Roguelite --skill dojo-review-shariqazeem

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Many Dojo/Cairo projects ship with subtle model, system, and security issues, inefficient gas usage, and gaps in test coverage that lead to runtime failures and unsafe on-chain behavior. This Skill helps teams and auditors quickly surface those design and implementation problems so fixes can be prioritized before deployment.

Core Features & Use Cases

  • Model review: Verifies required trait derivations, key ordering, field types, and promotes small focused ECS-style models.
  • System review: Checks interface attributes, contract annotations, namespace usage, input validation, event emission, and authorization patterns.
  • Security & correctness: Detects missing ownership checks, integer under/overflow risks, improper state writes, and non-atomic updates.
  • Gas optimization & performance: Finds redundant model reads/writes, oversized types, and unnecessary computations to reduce transaction costs.
  • Test coverage analysis: Identifies missing unit and integration tests, edge case omissions, and failure-case assertions for robust CI.
  • Use cases: Pre-release audits, code review sessions, security assessments, and developer onboarding checklists.

Quick Start

Review my Dojo project for model correctness, system security, gas optimizations, and missing tests.

Frequently Asked Questions about dojo-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Dojo Cairo smart contracts for security and gas optimization?

To audit Dojo Cairo smart contracts, you review model trait derivations, system authorization patterns, integer safety, and redundant state writes to identify security vulnerabilities and reduce transaction gas costs before deployment.

What security checks should I perform during a Dojo Cairo code review?

A Dojo Cairo security review checks for missing ownership validations, integer overflow and underflow risks, improper state writes, non-atomic updates, and missing input validation to prevent unsafe on-chain behavior.

How do I optimize gas usage in Dojo ECS models and systems?

Gas optimization in Dojo models and systems involves identifying redundant model reads and writes, replacing oversized field types with smaller ones, and eliminating unnecessary computations to lower transaction costs.

Does Dojo Cairo code review cover test coverage gaps and edge cases?

Dojo Cairo code review analyzes test coverage by identifying missing unit and integration tests, edge case omissions, and failure-case assertions to ensure robust continuous integration for pre-release checks.

What is the best way to verify Dojo model trait derivations and key ordering?

The best way to verify Dojo model correctness is to check required trait derivations, validate key ordering, inspect field types, and ensure models remain small and focused following ECS-style architecture principles.

Can I check Dojo system interface attributes and namespace usage during a pre-release audit?

A pre-release audit of Dojo systems reviews interface attributes, contract annotations, namespace usage, event emissions, and authorization patterns to confirm deployment readiness and safe contract interactions.