pashov-audit-pipeline

Run parallel eight-agent security audits on Solidity codebases and consolidate findings.

120|12|Updated Apr 10, 2026
One-click install
npx skills add https://github.com/ccashwell/evm-cortex --skill pashov-audit-pipeline
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: pashov-audit-pipeline
Source: https://github.com/ccashwell/evm-cortex/tree/main/skills/pashov-audit-pipeline
Command: npx skills add https://github.com/ccashwell/evm-cortex --skill pashov-audit-pipeline

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This methodology runs 8 specialized security agents in parallel against the same codebase, then deduplicates and validates findings into a single report. Each agent examines the code through a distinct lens — attack vectors, math precision, access control, economics, execution flow, invariants, periphery integration, and first-principles reasoning. Parallel execution prevents tunnel vision and surfaces issues that single-pass reviews miss.

Core Features & Use Cases

  • Parallel eight-agent analysis runs in parallel across the same codebase to surface cross-cutting security concerns.
  • Deduplication & PoC verification consolidates findings into a single, actionable report with evidence.
  • Pre-merge and post-change audits across Foundry projects or multi-module repos to ensure security posture before release.

Quick Start

Run the 8-agent audit pipeline against your Solidity project to generate a comprehensive security report.

Frequently Asked Questions about pashov-audit-pipeline

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a parallel security audit for a Solidity Foundry project?▼

Run a parallel eight-agent security audit against your Solidity codebase to uncover vulnerabilities and consolidate findings into a single report. Each agent examines the code through a distinct lens like attack vectors, math precision, and access control.

What is parallel multi-agent vulnerability analysis in smart contracts?▼

Parallel multi-agent vulnerability analysis runs specialized security agents simultaneously across the same codebase to prevent tunnel vision. It surfaces cross-cutting issues that single-pass reviews miss by examining attack vectors, economics, and execution flow independently.

Does the eight-agent audit pipeline work with Foundry projects for pre-merge checks?▼

Yes, the eight-agent audit pipeline supports pre-merge and post-change security checks across Foundry projects. It deduplicates and validates findings with PoC generation to ensure your security posture before release.

Why use parallel agents instead of a single-pass Solidity code review?▼

Parallel agents prevent tunnel vision by examining code through distinct lenses including math precision, access control, and invariants. This approach surfaces cross-cutting concerns and vulnerabilities that standard single-pass reviews often miss.

Can I generate PoC verification for vulnerabilities found in a Solidity audit?▼

Yes, the audit pipeline includes deduplication and PoC verification to consolidate findings into a structured final report. This process generates actionable evidence with traceable findings for discovered vulnerabilities.

What are the limitations of automated parallel security audits for smart contracts?▼

Automated parallel security audits require a defined source package and are designed for Foundry projects or mature codebases. The eight-agent workflow deduplicates findings but relies on structured code for comprehensive analysis.