pashov-audit-pipeline

Run parallel eight-agent security audits on Solidity codebases and consolidate findings.

120|12|Updated Apr 10, 2026
One-click install
npx skills add https://github.com/ccashwell/evm-cortex --skill pashov-audit-pipeline
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pashov-audit-pipeline
Source: https://github.com/ccashwell/evm-cortex/tree/main/skills/pashov-audit-pipeline
Command: npx skills add https://github.com/ccashwell/evm-cortex --skill pashov-audit-pipeline

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This methodology runs 8 specialized security agents in parallel against the same codebase, then deduplicates and validates findings into a single report. Each agent examines the code through a distinct lens — attack vectors, math precision, access control, economics, execution flow, invariants, periphery integration, and first-principles reasoning. Parallel execution prevents tunnel vision and surfaces issues that single-pass reviews miss.

Core Features & Use Cases

  • Parallel eight-agent analysis runs in parallel across the same codebase to surface cross-cutting security concerns.
  • Deduplication & PoC verification consolidates findings into a single, actionable report with evidence.
  • Pre-merge and post-change audits across Foundry projects or multi-module repos to ensure security posture before release.

Quick Start

Run the 8-agent audit pipeline against your Solidity project to generate a comprehensive security report.

Frequently Asked Questions about pashov-audit-pipeline

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a parallel security audit for a Solidity Foundry project?

Run a parallel eight-agent security audit against your Solidity codebase to uncover vulnerabilities and consolidate findings into a single report. Each agent examines the code through a distinct lens like attack vectors, math precision, and access control.

What is parallel multi-agent vulnerability analysis in smart contracts?

Parallel multi-agent vulnerability analysis runs specialized security agents simultaneously across the same codebase to prevent tunnel vision. It surfaces cross-cutting issues that single-pass reviews miss by examining attack vectors, economics, and execution flow independently.

Does the eight-agent audit pipeline work with Foundry projects for pre-merge checks?

Yes, the eight-agent audit pipeline supports pre-merge and post-change security checks across Foundry projects. It deduplicates and validates findings with PoC generation to ensure your security posture before release.

Why use parallel agents instead of a single-pass Solidity code review?

Parallel agents prevent tunnel vision by examining code through distinct lenses including math precision, access control, and invariants. This approach surfaces cross-cutting concerns and vulnerabilities that standard single-pass reviews often miss.

Can I generate PoC verification for vulnerabilities found in a Solidity audit?

Yes, the audit pipeline includes deduplication and PoC verification to consolidate findings into a structured final report. This process generates actionable evidence with traceable findings for discovered vulnerabilities.

What are the limitations of automated parallel security audits for smart contracts?

Automated parallel security audits require a defined source package and are designed for Foundry projects or mature codebases. The eight-agent workflow deduplicates findings but relies on structured code for comprehensive analysis.