Command
Audit only the git diff vs main (or specified base). Optimized for PR review.
Smart contract security auditor for Claude Code — vuln detection, exploit PoCs, mainnet-fork simulation, audit cards, on-chain certificates. Solidity + Vyper · 38 commands · 19 agents · 33 skills · 9 MCP servers.
Command
Audit only the git diff vs main (or specified base). Optimized for PR review.
Command
Deep audit — same as /audit but spawns more parallel subagents, runs multi-pass review, and chases exploit chains across files.
Command
Audit third-party dependencies — resolve installed versions, cross-reference known-vulnerable releases, and flag vendored code that has diverged from upstream.
Command
Diff two Rugproof audit reports (before vs after) to track regressions — what's new, what's fixed, and whether the grade moved.
Command
Pull past public audits (Code4rena, Sherlock, Spearbit, etc.) for a deployed contract or known protocol.
Command
Audit a deployed contract on a live chain. Pulls verified source from the block explorer, optionally forks the chain for live-state simulation.
Command
Diff the on-chain configuration of one contract deployed across multiple chains — owner, oracle, fees, timelock, pause state, proxy impl — and flag the chain that drifted.
Command
Multi-pass consensus audit — runs the audit twice with different prompts, only reports consensus findings. Aggressively cuts false positives.
Command
Full security audit of a Solidity/Vyper/Rust contract or directory. Runs the entire vuln-skills library and dispatches DeFi specialist subagents based on detected protocol type.
Command
Submit a finding to a bug-bounty platform (Immunefi, Cantina) automatically.
Command
Generate a responsible-disclosure bounty submission from a confirmed finding — Immunefi / protocol bounty / SEAL 911 formats.
Command
Generate a shareable PNG audit card from the latest /audit. Optimized for social media.
Command
Run forge coverage, identify untested branches, generate tests to close gaps.
Command
Run Rugproof against the bundled vulnerable example contracts — first-run "wow moment".
Command
Diff the contract against a canonical reference implementation (OZ, Solady, Uniswap V3, etc.) and flag suspicious deltas.
Command
Mark a finding as a false positive (or accepted risk). Future audits won't re-report it.
Command
Explain a finding in plain English, with examples. Optionally tailored to a beginner audience.
Command
Chain multiple findings into a single multi-step exploit. Produces a Foundry test that proves the chain works.
Command
Generate an exploit against a deployed contract on a fork. Validates the exploit works on live state.
Command
Generate a working Foundry PoC that exploits a specific finding. Compiles and passes.
Command
Generate property-based fuzz tests for a specific function.
Command
Gas profile — find expensive operations and suggest optimizations with before/after numbers.
Command
Generate Foundry invariant tests for property-based fuzzing. The high-value command for serious teams.
Command
Mint a soulbound Audit Certificate NFT on Berachain (or other supported chain) for a completed audit.