nemesis-auditor

Run iterative security audits alternating business logic and state inconsistency detection.

243|63|Updated Mar 6, 2026
One-click install
npx skills add https://github.com/0xiehnnkta/nemesis-auditor --skill nemesis-auditor
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: nemesis-auditor
Source: https://github.com/0xiehnnkta/nemesis-auditor/tree/main/.claude/skills/nemesis-auditor
Command: npx skills add https://github.com/0xiehnnkta/nemesis-auditor --skill nemesis-auditor

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill performs an iterative, deep-logic security audit on codebases, combining two complementary methodologies to find bugs that neither can catch alone. It aims to uncover complex vulnerabilities by questioning assumptions and mapping state inconsistencies.

Core Features & Use Cases

  • Iterative Auditing: Runs alternating passes of Feynman Auditor (business logic) and State Inconsistency Auditor (state desync) until convergence.
  • Language-Agnostic: Works on Solidity, Move, Rust, Go, C++, Python, TypeScript, and more.
  • Deep Logic & State Analysis: Catches bugs at the intersection of business logic flaws and state management errors.
  • Use Case: Audit a complex smart contract by running Nemesis to ensure both the intricate business logic and the precise state synchronization are free from vulnerabilities.

Quick Start

Use the nemesis-auditor skill to perform a deep combined audit on the current project.

Frequently Asked Questions about nemesis-auditor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a deep security audit that catches business logic flaws and state inconsistencies?

To run a deep security audit for business logic flaws and state inconsistencies, use an iterative multi-pass approach. This method alternates between questioning logic assumptions and detecting state desync errors until convergence, catching complex vulnerabilities that single-pass audits miss.

Can I use this iterative code analysis tool to audit smart contracts written in Solidity and Move?

Yes, this iterative code analysis tool audits smart contracts written in Solidity and Move. It is language-agnostic and also supports Rust, Go, C++, Python, and TypeScript, analyzing intricate business logic and state synchronization across these programming languages.

What is iterative auditing and how does it find vulnerabilities that single-pass code analysis misses?

Iterative auditing is a feedback loop model that runs alternating passes of business logic interrogation and state inconsistency detection. It finds vulnerabilities at the intersection of logical flaws and state synchronization errors, converging only when no further issues are detected.

Do I need Claude Code CLI to perform a deep-logic security audit on my codebase?

Yes, you need Claude Code CLI installed to perform this deep-logic security audit. The auditing agent operates through the CLI to execute iterative passes and analyze the codebase for complex vulnerabilities arising from state desync and logic flaws.

What is the best way to detect state synchronization errors in complex codebases?

The best way to detect state synchronization errors is combining state desync detection with business logic interrogation in an iterative loop. This multi-pass approach maps state inconsistencies across the codebase, ensuring precise state synchronization free from vulnerabilities.

When should I not use a multi-pass security audit approach for vulnerability detection?

You should avoid a multi-pass iterative security audit when seeking rapid, superficial vulnerability scanning. This approach is designed for deep convergence on complex logic and state interplay, making it intensive and potentially excessive for simple codebases without intricate state synchronization requirements.