#729 by GitHub stars

pashov/skills

Pashov Audit Group Skills

History

Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.

View weekly changes

fizz/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

eacfc09b365d → eacfc09b365d

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → eacfc09b365d

No earlier version was observed for comparison.

Compare on GitHub

fizz/skills/fizz-convert/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

eacfc09b365d → eacfc09b365d

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → eacfc09b365d

No earlier version was observed for comparison.

Compare on GitHub

fizz/skills/fizz-sync/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

eacfc09b365d → eacfc09b365d

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → eacfc09b365d

No earlier version was observed for comparison.

Compare on GitHub

solidity-auditor/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

eacfc09b365d → eacfc09b365d

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → eacfc09b365d

No earlier version was observed for comparison.

Compare on GitHub

x-ray/SKILL.md

Week of Nov 2, 2026 · +0 / −0 lines

Before Network or broad shell → After Network or broad shell

eacfc09b365d → eacfc09b365d

Compare on GitHub

Week of Oct 26, 2026 · Line counts unavailable

Before Not checked yet → After Network or broad shell

First observation → eacfc09b365d

No earlier version was observed for comparison.

Compare on GitHub

View on GitHubAdd to my skills

Verified commit eacfc09b365d2697b83355909d0300607e596ffc

git clone --filter=blob:none --no-checkout https://github.com/pashov/skills.git .hotskills/pashov-skills && git -C .hotskills/pashov-skills checkout --detach eacfc09b365d2697b83355909d0300607e596ffc # Copy each selected skill directory from .hotskills/pashov-skills into .claude/skills/<skill-name>/
1.3kGitHub stars
9stars in 7 days
5skills in this repository
1commit in 30 days

Heat

3.9
  • Star growth, last 7 daysAhead of 78% of tracked repositories
  • Star growth, last 24 hoursAhead of 3% of tracked repositories
  • Rank movement, last 7 daysAhead of 11% of tracked repositories
  • Commits, last 30 daysAhead of 54% of tracked repositories
  • Accounts asking about it through MCP, last 7 daysNot available
  • Hot votes this weekAhead of 0% of tracked repositories

Heat never changes the order by stars, and sponsorship never touches it. How heat works

Stars over time

Aug 2, 2026Nov 5, 20261,302

Individual skills in this repository

How it works

fizz

When your agent uses it

Generate Echidna/Medusa-compatible Solidity fuzz suites from Foundry or Hardhat projects. Trigger on "fizz", "generate fuzz suite", "build fuzz harness", "stateful fuzzing", "fuzzing harness", "property testing", and "invariant suite".

What it loads into context

Frontmatter

63 tokens

Always available to the agent

SKILL.md

10,683 tokens

When the skill is activated

Reference documents

23,892 tokens

Loaded on request

Token counts are estimates. Scripts run separately; they are not counted as reference context.

The playbook

  1. Workflow Rules
  2. Parameters
  3. Run Mode
  4. Subagent Model
  5. Step 0: Print Banner
  6. Step 1: Verify Tooling And Environment
  7. Step 2: Compile And Extract
  8. Step 3: Understand The Protocol
  9. Step 4: Select Entry Points
  10. Step 4.5: Cost Estimate
  11. Step 5: Generate Scaffold
  12. Step 6: Modify Core Files And Wire Setup
  13. Step 7: Generate Handlers
  14. Step 8: Reach Coverage With Medusa
  15. Step 9: Generate Invariants (5 Parallel Discovery Agents + Synthesizer + 2 Implementers)
  16. Step 10: Run Campaigns
  17. Step 11: Validate And Report

Scripts executed separately

  • scripts/ensure_foundry.sh
  • scripts/estimate_cost.js
  • scripts/extract_abis.js
  • scripts/fizz_sync.js
  • scripts/generate_handlers.js
  • scripts/generate_suite.js
  • scripts/lib/log-viewer.js
  • scripts/run_echidna.js
  • scripts/run_medusa.js
  • scripts/select_functions.js
  • scripts/setup_fuzz_profile.sh

Files

  • README.mddoc1,504 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • SKILL.mdcore45,129 bytes
  • VERSIONasset2 bytes
  • agents/implementers/global-property-implementer.mddoc4,096 bytes
  • agents/implementers/specific-property-implementer.mddoc5,447 bytes
  • agents/invariant-discovery/adversarial-profit-maximizer.mddoc6,618 bytes
  • agents/invariant-discovery/conservation-auditor.mddoc5,052 bytes
  • agents/invariant-discovery/protocol-type-specialist.mddoc8,492 bytes
  • agents/invariant-discovery/roundtrip-rounding-analyst.mddoc7,634 bytes
  • agents/invariant-discovery/state-transition-mapper.mddoc4,658 bytes
  • agents/invariant-discovery/synthesizer.mddoc15,737 bytes
  • agents/protocol-analyzer.mddoc5,600 bytes
  • agents/report-writer.mddoc8,781 bytes
  • evals/evals.jsonasset731 bytes
  • references/handler-patterns.mddoc10,239 bytes
  • references/property-generation.mddoc5,555 bytes
  • references/selection-policy.mddoc2,292 bytes
  • references/setup-playbook.mddoc3,789 bytes
  • references/template-map.mddoc7,224 bytes
  • scripts/ensure_foundry.shruns4,402 bytes
  • scripts/estimate_cost.jsruns6,233 bytes
  • scripts/extract_abis.jsruns11,484 bytes
  • scripts/fizz_sync.jsruns29,129 bytes
  • scripts/generate_handlers.jsruns14,665 bytes
  • scripts/generate_suite.jsruns9,752 bytes
  • scripts/lib/log-viewer.jsruns11,626 bytes
  • scripts/run_echidna.jsruns6,454 bytes
  • scripts/run_medusa.jsruns12,514 bytes
  • scripts/select_functions.jsruns23,163 bytes
  • scripts/setup_fuzz_profile.shruns5,007 bytes
  • templates/Actor.solasset2,027 bytes
  • templates/Base.solasset4,689 bytes
  • templates/FoundryTester.solasset949 bytes
  • templates/FuzzTester.solasset245 bytes
  • templates/Properties.solasset886 bytes
  • templates/README.mddoc2,116 bytes
  • templates/Snapshots.solasset618 bytes
  • templates/echidna.yamlasset599 bytes
  • templates/handlers/Handlers.solasset413 bytes
  • templates/medusa.jsonasset2,189 bytes
  • templates/utils/Clamp.solasset7,547 bytes
  • templates/utils/DecimalPrinter.solasset1,892 bytes
  • templates/utils/Deployer.solasset530 bytes
  • templates/utils/EnumerableSet.solasset6,040 bytes
  • templates/utils/Hevm.solasset2,258 bytes
  • templates/utils/Logger.solasset14,359 bytes
  • templates/utils/Math.solasset1,693 bytes
  • templates/utils/MockERC20.solasset10,385 bytes
  • templates/utils/PropertiesAsserts.solasset7,455 bytes
  • templates/utils/StringUtils.solasset3,484 bytes
Read SKILL.md

# Fizz

Generate a stateful Solidity fuzz suite under `{SUITE_DIR}` (default: `test/fizz/`), with metadata and fuzzer runtime files under `{META_DIR}` (default: `fizz_data/`).

Use `Echidna` and `Medusa` for invariant campaigns. Use `Foundry` for compilation, smoke testing, and quick debugging.

## Workflow Rules

- Follow the steps in order. Do not skip forward if a required artifact for the current step does not exist yet.
- If a step fails, stop there and report the blocker.
- If tooling is missing, say exactly what was attempted and what is missing.
- Keep the generated Solidity suite isolated under `test/fizz/` and the metadata/runtime files under `fizz_data/` unless the user explicitly asks for different paths.
- Reuse existing project setup and test logic whenever possible; do not invent a deployment flow if the repo already has one.
View the complete source on GitHub

Skills included

  • fizz
  • fizz-convert
  • fizz-sync
  • solidity-auditor
  • x-ray

Repository facts

License
MIT
Created
Feb 23, 2026
Last pushed
Oct 21, 2026
Forks
242
Open issues
2
Project activity
Active

Rank over the last 12 weeks

Now #729 · best #535 · down 95 in 30 days

  1. #717 on Nov 1
  2. #718 on Nov 2
  3. #722 on Nov 3
  4. #725 on Nov 4
  5. #727 on Nov 5
  6. #729 since Nov 6
73 earlier periods
  1. #523 on Aug 2
  2. #520 on Aug 7
  3. #515 on Aug 8
  4. #521 on Aug 9
  5. #535 on Aug 10
  6. #537 from Aug 11 to Aug 12
  7. #538 on Aug 13
  8. #537 on Aug 14
  9. #522 on Aug 15
  10. #535 on Aug 16
  11. #539 on Aug 17
  12. #556 on Aug 18
  13. #545 from Aug 19 to Aug 20
  14. #549 on Aug 21
  15. #536 on Aug 22
  16. #554 on Aug 23
  17. #558 on Aug 24
  18. #568 on Aug 25
  19. #556 on Aug 26
  20. #571 on Aug 27
  21. #577 on Aug 28
  22. #569 on Aug 31
  23. #574 on Sep 1
  24. #570 on Sep 2
  25. #571 on Sep 3
  26. #552 on Sep 4
  27. #548 on Sep 5
  28. #562 on Sep 6
  29. #567 on Sep 7
  30. #584 on Sep 8
  31. #579 on Sep 10
  32. #568 on Sep 11
  33. #568 on Sep 13
  34. #590 on Sep 14
  35. #587 from Sep 16 to Sep 17
  36. #595 on Sep 18
  37. #588 on Sep 20
  38. #592 on Sep 21
  39. #599 on Sep 22
  40. #592 on Sep 23
  41. #571 on Sep 24
  42. #564 on Sep 25
  43. #563 on Sep 26
  44. #584 on Sep 27
  45. #588 on Sep 28
  46. #611 on Sep 29
  47. #596 on Sep 30
  48. #587 on Oct 2
  49. #567 on Oct 3
  50. #589 on Oct 5
  51. #601 on Oct 6
  52. #603 on Oct 7
  53. #634 on Oct 8
  54. #620 on Oct 9
  55. #603 on Oct 10
  56. #622 on Oct 12
  57. #621 on Oct 13
  58. #631 on Oct 14
  59. #624 on Oct 15
  60. #633 on Oct 16
  61. #615 on Oct 17
  62. #607 on Oct 18
  63. #635 on Oct 19
  64. #645 on Oct 20
  65. #649 on Oct 21
  66. #631 on Oct 22
  67. #629 on Oct 23
  68. #616 on Oct 24
  69. #696 on Oct 25
  70. #703 on Oct 28
  71. #707 on Oct 29
  72. #710 on Oct 30
  73. #714 on Oct 31

Before you install

Network or broad shell

Automated signals, not a guarantee

Checked Nov 3, 2026

Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.

Show 85 notes
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
  • fizz/SKILL.md:1 Analysis incomplete: Referenced executable target unavailable; not analyzed
Show all 89 signals by file

fizz/README.md

  • Network accessline 30
    Install https://github.com/pashov/skills/ and run fizz on the codebase

fizz/SKILL.md

  • Network accessline 98
    2. Run `forge --version`. 3. If `forge --version` fails, tell the user that Foundry is missing and suggest installing it using the official documentation:    Foundry install guide: `https://www.getfoundry.sh/introduction/installation`
  • Network accessline 99
    3. If `forge --version` fails, tell the user that Foundry is missing and suggest installing it using the official documentation:    Foundry install guide: `https://www.getfoundry.sh/introduction/installation` 4. If `forge --version` fails, 
  • Network accessline 100
    Foundry install guide: `https://www.getfoundry.sh/introduction/installation`
  • Network accessline 105
    8. Run `echidna --version`. 9. If either command fails, tell the user which tool is missing and suggest installing it using the official documentation:    Medusa install guide: `https://secure-contracts.com/program-analysis/medusa/docs/src/
  • Network accessline 106
    9. If either command fails, tell the user which tool is missing and suggest installing it using the official documentation:    Medusa install guide: `https://secure-contracts.com/program-analysis/medusa/docs/src/getting_started/installation
  • Network accessline 107
    Medusa install guide: `https://secure-contracts.com/program-analysis/medusa/docs/src/getting_started/installation.html`
  • Network accessline 108
    Echidna install guide: `https://secure-contracts.com/program-analysis/echidna/introduction/installation.html`
  • Dangerous shell operationline 134
    Before Attempt 1, delete `/tmp/x-ray-attempts.md` if it exists (`rm -f /tmp/x-ray-attempts.md`) — stale entries from a previous run would falsely satisfy the Attempt 4 gate. Then create a fresh `/tmp/x-ray-attempts.md` and append one entry 
  • Network accessline 139
    git clone --depth 1 https://github.com/pashov/skills.git /tmp/pashov-skills-xray-install \

fizz/scripts/ensure_foundry.sh

  • Executable scriptline 1
    #!/usr/bin/env bash
  • Network accessline 18
    echo ""     echo "Install Foundry:"     echo "  curl -L https://foundry.paradigm.xyz | bash"
  • Network accessline 19
    echo "Install Foundry:"     echo "  curl -L https://foundry.paradigm.xyz | bash"     echo "  foundryup"
  • Dangerous shell operationline 20
    echo "  curl -L https://foundry.paradigm.xyz | bash"
  • Network accessline 20
    echo "  curl -L https://foundry.paradigm.xyz | bash"
  • Network accessline 21
    echo "  foundryup"     echo ""     echo "Or see: https://www.getfoundry.sh/introduction/installation"
  • Network accessline 22
    echo ""     echo "Or see: https://www.getfoundry.sh/introduction/installation"     exit 1
  • Network accessline 23
    echo "Or see: https://www.getfoundry.sh/introduction/installation"

fizz/scripts/estimate_cost.js

  • Executable scriptline 1
    #!/usr/bin/env node

fizz/scripts/extract_abis.js

  • Executable scriptline 1
    #!/usr/bin/env node
  • Executable scriptline 1
    #!/usr/bin/env node

fizz/scripts/fizz_sync.js

  • Executable scriptline 1
    #!/usr/bin/env node
  • Executable scriptline 1
    #!/usr/bin/env node
  • Dangerous shell operationline 404
    for (const rm of contractsRemoved) {
  • Dangerous shell operationline 404
    for (const rm of contractsRemoved) {

fizz/scripts/generate_handlers.js

  • Executable scriptline 1
    #!/usr/bin/env node

fizz/scripts/generate_suite.js

  • Executable scriptline 1
    #!/usr/bin/env node

fizz/scripts/lib/log-viewer.js

  • Executable scriptline 1
    Executable file
  • Network accessline 45
    return new Promise((resolve) => {         const server = http.createServer((req, res) => {             const requestURL = new URL(req.url, 'http://127.0.0.1');
  • Network accessline 47
    const requestURL = new URL(req.url, 'http://127.0.0.1');
  • Network accessline 74
    server.listen(0, '127.0.0.1', () => {             const address = server.address();             const viewerURL = `http://127.0.0.1:${address.port}`;
  • Network accessline 76
    const viewerURL = `http://127.0.0.1:${address.port}`;
  • Network accessline 306
    async function poll() {       try {         const response = await fetch('/log?offset=' + offset, { cache: 'no-store' });
  • Network accessline 307
    try {         const response = await fetch('/log?offset=' + offset, { cache: 'no-store' });         const payload = await response.json();
  • Network accessline 308
    const response = await fetch('/log?offset=' + offset, { cache: 'no-store' });

fizz/scripts/run_echidna.js

  • Executable scriptline 1
    #!/usr/bin/env node

fizz/scripts/run_medusa.js

  • Executable scriptline 1
    #!/usr/bin/env node

fizz/scripts/select_functions.js

  • Executable scriptline 1
    #!/usr/bin/env node
  • Network accessline 500
    try {     const res = await fetch(SERVER_URL + '/save', {
  • Network accessline 501
    const res = await fetch(SERVER_URL + '/save', {
  • Network accessline 612
    server.listen(0, () => {     const port = server.address().port;     serverURL = `http://127.0.0.1:${port}`;
  • Network accessline 613
    const port = server.address().port;     serverURL = `http://127.0.0.1:${port}`;     console.log(`\nFunction selector running at ${serverURL}`);
  • Network accessline 614
    serverURL = `http://127.0.0.1:${port}`;

fizz/scripts/setup_fuzz_profile.sh

  • Executable scriptline 1
    #!/usr/bin/env bash
  • Dangerous shell operationline 72
    rm -f "$TOML.bak"
  • Dangerous shell operationline 109
    rm -f "$TOML.bak"
  • Dangerous shell operationline 135
    rm -f "$TOML.bak"

fizz/templates/echidna.yaml

  • Network accessline 18
    # https://secure-contracts.com/program-analysis/echidna/configuration.html

fizz/templates/utils/Clamp.sol

  • Network accessline 7
    /// @author Modified from Crytic (https://github.com/crytic/properties/blob/main/contracts/util/PropertiesAsserts.sol)

fizz/templates/utils/Deployer.sol

  • Network accessline 4
    // Source: https://solidity-by-example.org/app/deploy-any-contract/

fizz/templates/utils/EnumerableSet.sol

  • Network accessline 5
    /**  * @dev Library for managing  * https://en.wikipedia.org/wiki/Set_(abstract_data_type)[sets] of primitive
  • Network accessline 6
    * @dev Library for managing  * https://en.wikipedia.org/wiki/Set_(abstract_data_type)[sets] of primitive  * types.
  • Network accessline 7
    * https://en.wikipedia.org/wiki/Set_(abstract_data_type)[sets] of primitive
  • Network accessline 31
    * Trying to delete such a structure from storage will likely result in data corruption, rendering the structure  * unusable.  * See https://github.com/ethereum/solidity/pull/11843[ethereum/solidity#11843] for more info.
  • Network accessline 32
    * unusable.  * See https://github.com/ethereum/solidity/pull/11843[ethereum/solidity#11843] for more info.  *
  • Network accessline 33
    * See https://github.com/ethereum/solidity/pull/11843[ethereum/solidity#11843] for more info.

fizz/templates/utils/Hevm.sol

  • Network accessline 4
    // source: https://github.com/crytic/properties/blob/main/contracts/util/IHevm.sol

fizz/templates/utils/Math.sol

  • Network accessline 4
    /// @author Modified from Forge standard lib (https://github.com/foundry-rs/forge-std/blob/master/src/StdMath.sol)

fizz/templates/utils/MockERC20.sol

  • Network accessline 27
    /// @notice Sets `amount` as the allowance of `spender` over the caller's tokens.     /// @dev Be aware of front-running risks: https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729
  • Network accessline 28
    /// @dev Be aware of front-running risks: https://github.com/ethereum/EIPs/issues/20#issuecomment-263524729
  • Network accessline 45
    /// @notice This is a mock contract of the ERC20 standard for testing purposes only, it SHOULD NOT be used in production. /// @notice Includes open deal function to mint tokens to any address.  /// @dev Forked from: https://github.com/trans
  • Network accessline 46
    /// @notice Includes open deal function to mint tokens to any address.  /// @dev Forked from: https://github.com/transmissions11/solmate/blob/0384dbaaa4fcb5715738a9254a7c0a4cb62cf458/src/tokens/ERC20.sol contract MockERC20 is IERC20 {
  • Network accessline 47
    /// @dev Forked from: https://github.com/transmissions11/solmate/blob/0384dbaaa4fcb5715738a9254a7c0a4cb62cf458/src/tokens/ERC20.sol

fizz/templates/utils/PropertiesAsserts.sol

  • Network accessline 6
    /// @author Modified from Crytic (https://github.com/crytic/properties/blob/main/contracts/util/PropertiesAsserts.sol)

fizz/templates/utils/StringUtils.sol

  • Network accessline 4
    /// @notice Efficient library for creating string representations of integers. /// @author Solmate (https://github.com/transmissions11/solmate/blob/main/src/utils/LibString.sol)
  • Network accessline 5
    /// @author Solmate (https://github.com/transmissions11/solmate/blob/main/src/utils/LibString.sol)
  • Network accessline 6
    /// @author Modified from Solady (https://github.com/Vectorized/solady/blob/main/src/utils/LibString.sol)

solidity-auditor/README.md

  • Network accessline 22
    Install https://github.com/pashov/skills/ and run solidity auditor on the codebase

solidity-auditor/SKILL.md

  • Network accessline 65
    c. ToolSearch `select:Agent` d. Read the local `VERSION` file from the same directory as this skill e. Bash `curl -sf https://raw.githubusercontent.com/pashov/skills/main/solidity-auditor/VERSION`
  • Network accessline 66
    d. Read the local `VERSION` file from the same directory as this skill e. Bash `curl -sf https://raw.githubusercontent.com/pashov/skills/main/solidity-auditor/VERSION` f. Bash `mktemp -d ./.audit-XXXXXX` → store as `{bundle_dir}`
  • Network accessline 67
    e. Bash `curl -sf https://raw.githubusercontent.com/pashov/skills/main/solidity-auditor/VERSION`
  • Network accessline 94
    If the remote VERSION fetch succeeds, compare the two as **numbers** and warn **only when the local one is lower**: print `⚠<U+FE0F> You are not using the latest version. Please upgrade for best security coverage. See https://github.com/pashov/ski

solidity-auditor/references/assemble.sh

  • Executable scriptline 1
    #!/usr/bin/env bash
  • Dangerous shell operationline 39
    trap 'rm -rf "$work"' EXIT
  • Network accessline 348
    rule say "> ⚠<U+FE0F> This review was performed by an AI assistant. AI analysis can never verify the complete absence of vulnerabilities and no guarantee of security is given. Team security reviews, bug bounty programs, and on-chain monitoring are
  • Network accessline 349
    say "> ⚠<U+FE0F> This review was performed by an AI assistant. AI analysis can never verify the complete absence of vulnerabilities and no guarantee of security is given. Team security reviews, bug bounty programs, and on-chain monitoring are stro

solidity-auditor/references/dedup-and-assembly.md

  • Dangerous shell operationline 414
    5. **Auto-clean.** `rm -rf {bundle_dir}`. Bundle dir = transient build state, not an artifact. Don't skip. It runs once per scan, at any pass count, and it runs when the loop stopped early too. For debugging a loop: copy the bundle elsewher

solidity-auditor/references/report-formatting.md

  • Network accessline 158
    > ⚠<U+FE0F> This review was performed by an AI assistant. AI analysis can never verify the complete absence of vulnerabilities and no guarantee of security is given. Team security reviews, bug bounty programs, and on-chain monitoring are strongly 

x-ray/README.md

  • Network accessline 32
    Install latest https://github.com/pashov/skills/ and run x-ray on the codebase

x-ray/SKILL.md

  • Network accessline 41
    **0. Version check** (foreground): - Read the local `VERSION` file from `$SKILL_DIR/VERSION` - Bash `curl -sf https://raw.githubusercontent.com/pashov/skills/main/x-ray/VERSION`
  • Network accessline 42
    - Read the local `VERSION` file from `$SKILL_DIR/VERSION` - Bash `curl -sf https://raw.githubusercontent.com/pashov/skills/main/x-ray/VERSION` - If the remote VERSION fetch succeeds and differs from local, print `⚠<U+FE0F> You are not using the la
  • Network accessline 43
    - Bash `curl -sf https://raw.githubusercontent.com/pashov/skills/main/x-ray/VERSION`
  • Network accessline 44
    - If the remote VERSION fetch succeeds and differs from local, print `⚠<U+FE0F> You are not using the latest version. Please upgrade for best security coverage. See https://github.com/pashov/skills`. If it fails, skip silently.

x-ray/references/templates.md

  • Dangerous shell operationline 715
    rm -f x-ray/architecture.json x-ray/git-security-analysis.json /tmp/architecture-preview.png

x-ray/scripts/analyze_git_security.py

  • Executable scriptline 1
    #!/usr/bin/env python3

x-ray/scripts/entry_points.py

  • Executable scriptline 1
    #!/usr/bin/env python3

x-ray/scripts/enumerate.sh

  • Executable scriptline 1
    #!/bin/bash

x-ray/scripts/generate_svg.py

  • Executable scriptline 1
    #!/usr/bin/env python3
  • Network accessline 665
    a(f'<svg xmlns="http://www.w3.org/2000/svg" width="{pw}" height="{ph}"'

How the signals fit together

Facts from a static read of the files at the pinned commit. They describe what the code does, not why.

Some files could not be read; the facts below still hold.

Signal confidence: 2 facts

Works with

Agent compatibility, from the files in this repository
AgentStatusEvidenceInstall to
Claude CodeNativePath CLAUDE.md.claude/skills/<skill-name>/
CodexCompatibleStandard SKILL.md fizz/SKILL.md.agents/skills/<skill-name>/
CursorCompatibleStandard SKILL.md fizz/SKILL.md.cursor/skills/<skill-name>/
Gemini CLICompatibleStandard SKILL.md fizz/SKILL.md.gemini/skills/<skill-name>/
GitHub CopilotCompatibleStandard SKILL.md fizz/SKILL.md.github/skills/<skill-name>/
OpenCodeCompatibleStandard SKILL.md fizz/SKILL.md.opencode/skills/<skill-name>/
  • Native The repository ships a manifest, folder or frontmatter field for this agent.
  • Compatible A standard SKILL.md that this agent can read.
  • Unknown No evidence either way.

Derived automatically from paths, manifests and frontmatter. Not tested on each agent.

Explore alternatives and comparisons

Add this badge to your README

It updates every night and links to this page.

pashov/skills: #729 on hotskills, 1.3k stars

[![pashov/skills on hotskills](https://hotskills.dev/badge/pashov-skills.svg)](https://hotskills.dev/skill/pashov-skills/)