What problem does it solve?
Smart contract security audits require deep expertise in Solidity, vulnerability patterns, and formal verification methods. This Skill transforms your AI coding assistant into a systematic security auditor that maps architecture, dispatches parallel hunt lanes for different vulnerability classes, and verifies findings through a Devil's Advocate pipeline.
Core Features & Use Cases
- Map-Hunt-Attack Methodology: Structured multi-phase pipeline that first maps the system architecture, then hunts for vulnerabilities across six parallel lanes (callback liveness, accounting entitlement, semantic consistency, token/oracle statefulness, economic differential, and adversarial deep), and finally attacks and verifies each finding.
- Parallel Agent Orchestration: Dispatches specialized sub-agents to hunt simultaneously across different vulnerability classes, then runs a skeptic-judge verification pipeline with proof requirements for confirmed findings.
- Static Analysis Integration: Runs Slither and Aderyn static analysis tools, integrates with Solodit for real-world vulnerability intelligence, and supports fuzz testing (Echidna, Medusa) and symbolic execution (Halmos) for proof generation.
- Use Case: Point this Skill at a Solidity codebase (local directory, GitHub repo, or specific files) and it will produce a structured security report with proved findings, confirmed unproven findings, candidates, design tradeoffs, and discarded items with reasoning.
Quick Start
Use the security-auditor skill to perform a comprehensive security audit on your Solidity project by providing the project directory or GitHub repository URL when the skill activates.
