feynman-auditor

Audit business logic across languages using first-principles questioning.

243|63|Updated Mar 6, 2026

Search Tags:#code review #vulnerability discovery #security audit #feynman technique #smart contract audit #logic bugs

Ready to run

npx skills add https://github.com/0xiehnnkta/nemesis-auditor --skill feynman-auditor

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: feynman-auditor
Source: https://github.com/0xiehnnkta/nemesis-auditor/tree/main/.claude/skills/feynman-auditor
Command: npx skills add https://github.com/0xiehnnkta/nemesis-auditor --skill feynman-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill identifies complex business logic bugs in code that traditional pattern-matching tools often miss by systematically questioning the reasoning behind every line of code.

Core Features & Use Cases

First-Principles Auditing: Applies the Feynman technique to challenge assumptions, uncover hidden invariants, and expose logic flaws.
Language-Agnostic: Works across various programming languages (Solidity, Move, Rust, Go, C++, Python, TypeScript) by focusing on universal logic principles.
Use Case: Audit a smart contract for subtle economic exploits or a critical backend service for race conditions that automated scanners overlooked.

Quick Start

Use the feynman-auditor skill to perform a deep logic review on the provided codebase.

Frequently Asked Questions about feynman-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find complex business logic bugs that automated code scanners miss?▼

To find logic bugs missed by automated scanners, perform a deep security audit using the Feynman technique to question the purpose, ordering, and consistency of every code decision from first principles.

What is the Feynman technique for code review and logic bug discovery?▼

The Feynman technique for code review involves systematically interrogating code logic, invariants, and state transitions across multiple functions to challenge assumptions and expose hidden logic flaws from first principles.

Can I use this approach to audit smart contracts written in Solidity and Rust?▼

Yes, you can audit smart contracts in Solidity, Rust, Move, and other languages because the auditing approach is language-agnostic and focuses on universal logic principles rather than syntax-specific patterns.

How do I perform a deep logic audit on a backend service for race conditions?▼

To perform a deep logic audit for race conditions, analyze state transitions and invariants across multiple transactions and functions, systematically questioning the reasoning behind every line of code.

When should I use first-principles auditing instead of pattern-matching security tools?▼

Use first-principles auditing instead of pattern-matching security tools when you need to uncover subtle economic exploits or complex logic flaws that require challenging hidden assumptions and invariants.

What are the limitations of using the Feynman technique for vulnerability discovery?▼

The limitation of using the Feynman technique for vulnerability discovery is that it requires systematic, deep interrogation of every decision and state transition, making it a highly manual process focused on logic rather than automated pattern detection.