About

Imported from 0x-Shashi/WEB3-AUDIT-SKILLS (skills/SKILL.md). Install upstream with npx skills add 0x-Shashi/WEB3-AUDIT-SKILLS --skill skills. Copyright stays with the author.

Web3 Audit Plugin - Core Skill Definition

Name: skills
Author: 0x-Shashi

Purpose

This plugin provides AI-powered smart contract security auditing capabilities across multiple blockchain platforms.

Capabilities

Multi-chain smart contract analysis (EVM, Solana, Move, Cairo, CosmWasm, TON)
Pattern-based vulnerability detection using 200+ known patterns
Protocol-specific audit checklists (DeFi, NFT, Bridge, Governance)
Attack chain analysis for multi-step exploit detection
Automated severity classification
Report generation with findings templates

Usage

Load the target smart contract code
Identify the chain and protocol type
Run appropriate scanner skill
Apply relevant checklist
Check attack chain patterns
Generate audit report

Skill Chain

Context Building → Scanner → Checklist → Attack Chains → Report

Available Scanners

Solidity Scanner (EVM chains)
Solana Scanner (Rust/Anchor)
Cairo Scanner (Starknet)
Move Scanner (Aptos/Sui)
Cosmos Scanner (CosmWasm/SDK)
TON Scanner (FunC/Tact)
Aptos Scanner (Move/Aptos)
Sui Scanner (Sui Move)
Starknet Scanner (Cairo)
Aztec Scanner (Noir)
Fuel Scanner (Sway)

Prerequisites

The plugin requires an AI model with tool-use capabilities. Each scanner skill may have chain-specific prerequisites (e.g., Solana scanner requires familiarity with Anchor framework).

Validation

To verify installation and test skill loading:

# Validate all SKILL.md files pass quality threshold
python scripts/quality-check.py --all --min-score 8

# Example trigger routing
trigger: "audit solidity"
route_to: solidity-scanner/SKILL.md
load: [checklists, patterns, severity]

# Verify scanner availability
ls skills/*/SKILL.md | wc -l  # Should show 29+ skills

Behavior Guidelines

Scanner selection is required based on detected chain type
Protocol template loading is optional but recommended
Severity classification MUST follow the decision tree in patterns/severity-scoring.md
Auditors may optionally skip gas optimization checks depending on engagement scope

References

Core References - Architecture diagrams and skill routing maps

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/0x-shashi-web3-audit-skills-skills/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

0x-shashi-web3-audit-skills-skills.ocm.jsonjson

{
  "ocm": "1",
  "id": "0x-shashi-web3-audit-skills-skills",
  "kind": "skill",
  "name": "skills",
  "description": "Root skill definition for the Web3 Audit Plugin providing AI-powered smart contract security auditing across EVM, Solana, Move, Cairo, CosmWasm, and TON platforms. Use as the top-level entry point for understanding plugin capabilities, supported chains, and skill routing.",
  "publisher": "0x-Shashi",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "legal"
    ],
    "tags": [
      "skill-md",
      "root",
      "web3",
      "audit",
      "multi-chain",
      "github"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Root skill definition for the Web3 Audit Plugin providing AI-powered smart contract security auditing across EVM, Solana, Move, Cairo, CosmWasm, and TON platforms. Use as the top-level entry point for understanding plugin capabilities, supported chains, and skill routing."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github",
      "repository": "https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS",
      "path": "skills/SKILL.md",
      "ref": "4c0e3b9d17436fa2f7ae709ba1c78c075a20c301",
      "url": "https://github.com/0x-Shashi/WEB3-AUDIT-SKILLS/blob/4c0e3b9d17436fa2f7ae709ba1c78c075a20c301/skills/SKILL.md",
      "key": "0x-Shashi/WEB3-AUDIT-SKILLS/skills/SKILL.md"
    }
  },
  "instructions": "# Web3 Audit Plugin - Core Skill Definition\n\n## Purpose\nThis plugin provides AI-powered smart contract security auditing capabilities across multiple blockchain platforms.\n\n## Capabilities\n- Multi-chain smart contract analysis (EVM, Solana, Move, Cairo, CosmWasm, TON)\n- Pattern-based vulnerability detection using 200+ known patterns\n- Protocol-specific audit checklists (DeFi, NFT, Bridge, Governance)\n- Attack chain analysis for multi-step exploit detection\n- Automated severity classification\n- Report generation with findings templates\n\n## Usage\n1. Load the target smart contract code\n2. Identif",
  "cost": {
    "context_tokens": 552
  }
}

Fetch it by URL: GET /api/v1/registry/0x-shashi-web3-audit-skills-skills/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.