Not in the top 1,000 by GitHub stars
Archethect/sc-auditor
Solidity smart contract auditor leveraging static analysis, Solodit findings and Map, Hunt, Attack strategy
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
skills/security-auditor/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → 942cc13111cf
No earlier version was observed for comparison.
Verified commit 942cc13111cf5b0617d9de8fa4fe9bc20f1d8cc8
git clone --filter=blob:none --no-checkout https://github.com/Archethect/sc-auditor.git .hotskills/archethect-sc-auditor && git -C .hotskills/archethect-sc-auditor checkout --detach 942cc13111cf5b0617d9de8fa4fe9bc20f1d8cc8
# Copy each selected skill directory from .hotskills/archethect-sc-auditor into .claude/skills/<skill-name>/git clone --filter=blob:none --no-checkout https://github.com/Archethect/sc-auditor.git .hotskills/archethect-sc-auditor && git -C .hotskills/archethect-sc-auditor checkout --detach 942cc13111cf5b0617d9de8fa4fe9bc20f1d8cc8
# Copy each selected skill directory from .hotskills/archethect-sc-auditor into .agents/skills/<skill-name>/Heat
0.4- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
- security-auditor
skills/security-auditor
How it works
security-auditor
When your agent uses it
Interactive smart contract security audit using Map-Hunt-Attack methodology with static analysis, parallel hunt lanes, skeptic-judge verification, and structured reporting.
What it loads into context
Frontmatter
197 tokensAlways available to the agent
SKILL.md
5,741 tokensWhen the skill is activated
Reference documents
45,165 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- NON-NEGOTIABLE RULES
- Sub-Agent Dispatch
- Phase Transition Checklist
- Core Protocols
- Checkpoint Discipline
- Solodit Usage
- Risk Patterns (Reference)
- Phase 0: RESUME CHECK
- Phase 0.5: RESOLVE INPUT
- Phase 1: SETUP (1 Sub-Agent)
- Phase 2: MAP (1 Sub-Agent)
- Phase 3: HUNT (5-6 Parallel Sub-Agents)
- Phase 4: ATTACK (N Parallel Sub-Agents)
- Phase 5: VERIFY (N Parallel Sub-Agents)
- Phase 5.5: CONFLICT RESOLUTION (Proof-Based)
- Phase 6: REPORT (Inline)
- Finding Output Format
Scripts executed separately
__tests__/skill.test.ts
Files
../../.claude-plugin/marketplace.jsonasset885 bytes../../.claude-plugin/plugin.jsonasset369 bytesSKILL.mdcore23,534 bytesSKILL.mdcore23,534 bytes__tests__/skill.test.tsruns44,041 bytesagents/openai.yamlasset1,107 bytesassets/attack-vectors/approval-abuse.mddoc6,839 bytesassets/attack-vectors/callback-grief.mddoc5,812 bytesassets/attack-vectors/entitlement-drift.mddoc6,039 bytesassets/attack-vectors/rounding-entitlement.mddoc7,522 bytesassets/attack-vectors/semantic-drift.mddoc6,465 bytesassets/hard-negatives/approval-abuse-negatives.mddoc6,815 bytesassets/hard-negatives/callback-grief-negatives.mddoc5,554 bytesassets/hard-negatives/entitlement-drift-negatives.mddoc6,129 bytesassets/hard-negatives/rounding-entitlement-negatives.mddoc7,979 bytesassets/hard-negatives/semantic-drift-negatives.mddoc5,964 bytesassets/prompts/attack.mddoc16,969 bytesassets/prompts/da-protocol.mddoc5,172 bytesassets/prompts/hunt-accounting-entitlement.mddoc14,887 bytesassets/prompts/hunt-adversarial-deep.mddoc19,995 bytesassets/prompts/hunt-callback-liveness.mddoc13,745 bytesassets/prompts/hunt-economic-differential.mddoc7,181 bytesassets/prompts/hunt-semantic-consistency.mddoc15,573 bytesassets/prompts/hunt-token-oracle-statefulness.mddoc17,132 bytesassets/prompts/judge.mddoc4,090 bytesassets/prompts/map.mddoc14,193 bytesassets/prompts/setup.mddoc5,645 bytesassets/prompts/skeptic.mddoc6,293 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubSkills included
- security-auditor
Repository facts
- License
- No license detected
- Created
- Feb 24, 2026
- Last pushed
- Mar 13, 2026
- Forks
- 29
- Open issues
- 0
- Project activity
- Slowing
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 5, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 1 note
skills/security-auditor/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- 1 broad permissionin 1 file: security-auditor/SKILL.md:1
- No dangerous shell commands
- 3 network referencesin 1 file: security-auditor/SKILL.md:161
- No hidden or obfuscated text
- No instruction overrides
- 1 executable scriptin 1 file: security-auditor/__tests__/skill.test.ts:1
- No access to secrets
- No requests to vote in Hot
Show all 5 signals by file
skills/security-auditor/SKILL.md
- Broad permissionsline 1
Bash - Network accessline 161
| Input type | Detection | Action | |------------|-----------|--------| | **GitHub repo URL** | Contains `github.com/<owner>/<repo>` (with optional `/blob/...` or `/tree/...` path) | Clone `https://github.com/<owner>/<repo>.git` into `<cwd> - Network accessline 162
|------------|-----------|--------| | **GitHub repo URL** | Contains `github.com/<owner>/<repo>` (with optional `/blob/...` or `/tree/...` path) | Clone `https://github.com/<owner>/<repo>.git` into `<cwd>/audits/<repo>/`. If already cloned - Network accessline 163
| **GitHub repo URL** | Contains `github.com/<owner>/<repo>` (with optional `/blob/...` or `/tree/...` path) | Clone `https://github.com/<owner>/<repo>.git` into `<cwd>/audits/<repo>/`. If already cloned there, `git pull` to update. Set `ro
skills/security-auditor/__tests__/skill.test.ts
- Executable scriptline 1
Executable file
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Signal confidence: 5 facts
- Broad permissions in the frontmatter of the SKILL.mdsecurity-auditor/SKILL.md:1High confidence
- Network access in prose of the SKILL.mdsecurity-auditor/SKILL.md:161Low confidence
- Network access in prose of the SKILL.mdsecurity-auditor/SKILL.md:162Low confidence
- Network access in prose of the SKILL.mdsecurity-auditor/SKILL.md:163Low confidence
- Executable script in code of a testsecurity-auditor/__tests__/skill.test.ts:1Low confidence
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Manifest .claude-plugin/marketplace.json | .claude/skills/<skill-name>/ |
| Codex | Native | Manifest AGENTS.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md skills/security-auditor/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md skills/security-auditor/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md skills/security-auditor/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md skills/security-auditor/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.