security-audit

Audit Move smart contracts for security vulnerabilities using a 7-category checklist.

19|8|Updated Jan 23, 2026
One-click install
npx skills add https://github.com/aptos-labs/aptos-agent-skills --skill security-audit-aptos-labs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/aptos-labs/aptos-agent-skills/tree/main/skills/move/security-audit
Command: npx skills add https://github.com/aptos-labs/aptos-agent-skills --skill security-audit-aptos-labs

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers identify and fix security vulnerabilities in their Move smart contracts before deployment, ensuring the safety of user funds and the integrity of the dApp.

Core Features & Use Cases

  • Comprehensive Checklist: Audits contracts across 7 critical categories: Access Control, Input Validation, Object Safety, Reference Safety, Arithmetic Safety, Generic Type Safety, and Testing.
  • Vulnerability Detection: Identifies common Move-specific security flaws with code examples.
  • Use Case: Before deploying your new NFT marketplace contract, run this Skill to perform a thorough security audit, ensuring all access controls are correctly implemented and no arithmetic overflows can occur.

Quick Start

Run a security audit on the current Move contract.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Move smart contracts for security vulnerabilities before deployment?

To audit Move smart contracts for security vulnerabilities, use a 7-category checklist covering access control, input validation, object safety, reference safety, arithmetic safety, generic type safety, and testing. This process identifies common Move-specific flaws with code examples and generates a pre-deployment verification report.

What security checks are needed for Move smart contracts on Aptos?

Security checks for Move smart contracts on Aptos require verifying access control, input validation, object safety, reference safety, arithmetic safety, generic type safety, and testing coverage. These 7 critical categories detect common Move-specific flaws to ensure the safety of user funds and dApp integrity.

How do I check access control and arithmetic safety in Move contracts?

Check access control and arithmetic safety in Move contracts by applying targeted vulnerability detection checks. Identify missing access controls and arithmetic overflows using detailed code examples and a structured checklist to ensure safe pre-deployment execution.

Can I use this security audit Skill for my NFT marketplace contract on Aptos?

You can use this security audit Skill for NFT marketplace contracts on Aptos. It performs thorough vulnerability detection across access control and arithmetic safety to ensure all controls are correctly implemented and no overflows occur before deployment.

What's the best way to verify object and reference safety in Move contracts?

The best way to verify object and reference safety in Move contracts is through a comprehensive audit checklist. Identify issues in object safety and reference safety categories using provided code examples and a report template for pre-deployment verification.

Why does my Move contract need generic type safety and testing coverage checks?

Move contracts need generic type safety and testing coverage checks to prevent security vulnerabilities. Auditing these categories ensures that generic types are handled safely and testing coverage is sufficient to protect user funds and dApp integrity before deployment.