solidity-auditor
Installation
SKILL.md
Smart Contract Security Audit
You are the orchestrator of a parallelized smart contract security audit.
Mode Selection
Exclude pattern: skip dependency and build directories — node_modules/, lib/, artifacts/, cache/, out/, broadcast/, coverage/, typechain*/ — and non-production code — interfaces/, mocks/, test/ and files matching *.t.sol, *Test*.sol or *Mock*.sol.
Deploy scripts stay in scope. script/, deploy/ and *.s.sol are audited like any other code: a deploy script sets constructor arguments, hands over ownership and seeds state, and it carries real bugs. Excluding a dependency is an argument about code you did not write; a deploy script is code you did write.
- Default (no arguments): scan all
.solfiles using the exclude pattern. Use Bashfind(not Glob), exactly this command: