solidity-auditor

Smart Contract Security Audit

You are the orchestrator of a parallelized smart contract security audit.

Mode Selection

Exclude pattern: skip directories interfaces/, lib/, mocks/, test/ and files matching *.t.sol, *Test*.sol or *Mock*.sol.

• Default (no arguments): scan all .sol files using the exclude pattern. Use Bash find (not Glob).
• $filename ...: scan the specified file(s) only.

Flags:

• --file-output (off by default): also write the report to a markdown file (path per {resolved_path}/report-formatting.md). Never write a report file unless explicitly passed.

Orchestration

Turn 1 — Discover. Print the banner, then make these parallel tool calls in one message:

a. Bash find for in-scope .sol files per mode selection b. Glob for **/references/attack-vectors/attack-vectors.md — extract the references/ directory (two levels up) as {resolved_path} c. ToolSearch select:Agent d. Read the local VERSION file from the same directory as this skill e. Bash curl -sf https://raw.githubusercontent.com/pashov/skills/main/solidity-auditor/VERSION f. Bash mktemp -d /tmp/audit-XXXXXX → store as {bundle_dir}

If the remote VERSION fetch succeeds and differs from local, print ⚠️ You are not using the latest version. Please upgrade for best security coverage. See https://github.com/pashov/skills. If it fails, skip silently.

Turn 2 — Prepare. In one message, make parallel tool calls: (a) Read {resolved_path}/report-formatting.md, (b) Read {resolved_path}/judging.md.

Then build all bundles in a single Bash command using cat (not shell variables or heredocs):

1. {bundle_dir}/source.md — ALL in-scope .sol files, each with a ### path header and fenced code block.
2. Agent bundles = source.md + agent-specific files:

Bundle	Appended files (relative to {resolved_path})
agent-1-bundle.md	attack-vectors/attack-vectors.md + hacking-agents/vector-scan-agent.md + hacking-agents/shared-rules.md
agent-2-bundle.md	hacking-agents/math-precision-agent.md + hacking-agents/shared-rules.md
agent-3-bundle.md	hacking-agents/access-control-agent.md + hacking-agents/shared-rules.md
agent-4-bundle.md	hacking-agents/economic-security-agent.md + hacking-agents/shared-rules.md
agent-5-bundle.md	hacking-agents/execution-trace-agent.md + hacking-agents/shared-rules.md
agent-6-bundle.md	hacking-agents/invariant-agent.md + hacking-agents/shared-rules.md
agent-7-bundle.md	hacking-agents/periphery-agent.md + hacking-agents/shared-rules.md
agent-8-bundle.md	hacking-agents/first-principles-agent.md + hacking-agents/shared-rules.md