x-ray

Generate an x-ray.md security readiness report for Solidity projects.

16|4|Updated Mar 22, 2026
One-click install
npx skills add https://github.com/idchain-world/id-agents --skill x-ray
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: x-ray
Source: https://github.com/idchain-world/id-agents/tree/main/configs/agents/solidity-security/skills/x-ray
Command: npx skills add https://github.com/idchain-world/id-agents --skill x-ray

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Generates an x-ray.md pre-audit report that consolidates threat models, invariants, test analysis, and git-history signals to guide auditors and developers, enabling quicker security readiness.

Core Features & Use Cases

  • Generates an x-ray.md readiness report with threat profiles, invariants, integrations, docs quality, test analysis, and developer/git history signals.
  • Incorporates threat references and templates to structure the report and provide consistent section templates for audits.
  • Produces supporting artifacts (architecture.json, entry-points.md) and an architecture diagram scaffold for quick review.
  • Works across Solidity projects using common toolchains (Foundry, Hardhat) and adapts to repository layout to surface actionable risk signals.

Quick Start

Run the x-ray skill on your Solidity project root to produce an x-ray.md and the associated artifacts.

Frequently Asked Questions about x-ray

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a pre-audit security report for a Solidity project?

Pre-audit security risk profiling is the process of evaluating a Solidity project's security posture before an official audit. It consolidates threat models, invariants, and git history signals into an audit-ready readiness report.

Does pre-audit security profiling work with both Foundry and Hardhat projects?

Yes, pre-audit security profiling works with both Foundry and Hardhat. The skill adapts to your repository layout to surface actionable risk signals and generate the readiness report.

What artifacts are produced during a Solidity threat model and readiness analysis?

A Solidity threat model and readiness analysis produces an x-ray.md report, an architecture.json file, entry-points.md, and an architecture diagram scaffold. These artifacts provide quick review material for auditors.

How do I prepare audit-readiness documentation for a smart contract codebase?

You prepare audit-readiness documentation by running an automated analysis that evaluates code quality, test coverage, and developer history. This generates a structured x-ray.md report with consistent section templates for auditors.

Can I use git history signals to identify security risks in my smart contracts?

Yes, you can use git history signals to identify security risks in smart contracts. The profiling process analyzes developer history and repository changes to surface actionable risk signals alongside threat models and test analysis.

What is the best way to consolidate invariants and threat models for a Solidity audit?

The best way to consolidate invariants and threat models is to use an automated readiness report generator. It structures these elements into a single x-ray.md document with supporting artifacts for quick auditor review.