audit

Audits EVM smart contracts using parallel specialist agents and domain-specific vulnerability checklists.

Updated Sep 9, 2026
One-click install
npx skills add https://github.com/m-faran/genie-markets --skill audit-m-faran
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: audit
Source: https://github.com/m-faran/genie-markets/tree/main/.agent/skills/ethskills/audit
Command: npx skills add https://github.com/m-faran/genie-markets --skill audit-m-faran

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Manually auditing EVM smart contracts for security vulnerabilities is slow and error-prone, and it is easy to miss non-obvious attack vectors across domains like DeFi, proxies, oracles, and signatures. This Skill systematizes the audit process with 500+ checklist items across 19 vulnerability domains. ## Core Features & Use Cases - Parallel Specialist Agents: Spawns one sub-agent per vulnerability domain, each walking a dedicated checklist and writing its own findings file. - 20 Domain Checklists: Covers ERC20, ERC4626 vaults, AMMs, lending, staking, bridges, proxies, signatures, governance, oracles, assembly, flash loans, DoS, access control, and more. - Structured Reporting: Synthesizes all findings into an AUDIT-REPORT.md and files GitHub issues for Medium severity and above. - Use Case: Given a GitHub link to a Solidity contract, run a full security audit that routes to the relevant checklists, produces a consolidated report, and files issues on the repository. ## Quick Start Audit the smart contract at this GitHub URL for security vulnerabilities and file issues for any Medium or higher severity findings.

Frequently Asked Questions about audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Solidity smart contract for vulnerabilities?▼

Provide the contract's GitHub URL and invoke the audit workflow. It fetches a master checklist index, selects 5-8 relevant domain checklists, spawns parallel sub-agents to walk each one, and synthesizes findings into an AUDIT-REPORT.md file.

What vulnerability domains does an EVM smart contract audit cover?▼

The audit covers 19-20 domains including ERC20 tokens, AMMs, lending, staking, ERC4626 vaults, account abstraction, bridges, proxies, signatures, governance, oracles, assembly, flash loans, DoS, and access control, with 500+ checklist items total.

Can this audit skill file GitHub issues automatically?▼

Yes, after synthesizing findings into an audit report, the workflow files GitHub issues on the target repository for findings rated Medium severity or above, using a standard finding format with severity definitions.

Does the audit work on non-mainnet EVM chains?▼

Yes, a dedicated chain-specific checklist covers Arbitrum, Optimism, zkSync, Blast, and BSC. The routing table in the master index determines which checklists to load based on the contract type and deployment target.

What is the difference between this audit skill and a security coding skill?▼

This skill systematically audits existing contracts you did not write, using external checklists and parallel agents. A defensive security skill instead teaches secure coding practices while writing new contracts.