PlamenTSV/plamen

Autonomous Web3 security audit agent for Claude Code

This repository also configures its own agents. See what plamen tells them →

306Stars on the repository
109Mods indexed here, across every type
21d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

ability-analysis

01

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Always (Aptos Move) - foundational security check - Inject Into Breadth agents, depth agents.

not rated 306 +1 21d ago A SkillSpector: pass 25 tokens original MIT

bit-shift-safety

02

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Always (Aptos Move) - Move VM aborts on shift = bit width - Inject Into Breadth agents, depth-edge-case.

not rated 306 +1 21d ago A SkillSpector: pass 35 tokens original MIT

centralization-risk

03

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Protocol has privileged roles (admin, operator, governance, resource account owner) - Covers Single points of failure, privilege escalation, external governance dependen...

not rated 306 +1 21d ago A SkillSpector: pass 35 tokens original MIT

cross-chain-timing

04

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern wormhole|layerzero|ccip|bridge|crosschain|vaa|guardian|emitter|relay|remotechain|payload|nonce.sequence - Inject Into Breadth agents, depth-external.

not rated 306 +1 21d ago A SkillSpector: warn 47 tokens original MIT

dependency-audit

05

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger EXTERNALLIB flag detected (protocol uses third-party Move dependencies) - Used by Breadth agents, depth-external.

not rated 306 +1 21d ago A SkillSpector: warn 28 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern MONETARYPARAMETER flag (required) - Inject Into Breadth agents (merged via M4 hierarchy).

not rated 306 +1 21d ago A SkillSpector: pass 28 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Any external module interaction detected in attacksurface.md - Inject Into Breadth agents (merged via M5 hierarchy).

not rated 306 +1 21d ago A SkillSpector: pass 30 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern FLASHLOAN flag (required) or BALANCEDEPENDENT flag (optional complement) - Inject Into Breadth agents, depth-token-flow, depth-edge-case.

not rated 306 +1 21d ago A SkillSpector: warn 40 tokens original MIT

fork-ancestry

09

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Always (run during recon TASK 0, not breadth) - Inject Into Recon agent only (metabuffer.md enrichment).

not rated 306 +1 21d ago A SkillSpector: pass 31 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger FASTANDARD flag detected (protocol uses FungibleAsset standard) - Used by Breadth agents, depth-token-flow.

not rated 306 +1 21d ago A SkillSpector: warn 29 tokens original MIT

migration-analysis

11

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Protocol has migration patterns (reinitialize, V2/V3, deprecated, upgrade, legacy, Coin-to-FA) - Covers Token type mismatches, stranded assets, interface incompatibiliti...

not rated 306 +1 21d ago A SkillSpector: warn 43 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Lightweight core directives for Aptos Move always-required skills — injected into every breadth agent. Full methodology lives in the dedicated Move-Safety Agent.

not rated 306 +1 21d ago A SkillSpector: pass 36 tokens original MIT

oracle-analysis

13

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern ORACLE flag (required) - Inject Into Breadth agents, depth-external, depth-edge-case.

not rated 306 +1 21d ago A SkillSpector: warn 25 tokens original MIT

reentrancy-analysis

14

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger REENTRANCY flag detected (dynamic dispatch, closures, dispatchable FA, function values) - Used by Breadth agents, depth-state-trace.

not rated 306 +1 21d ago A SkillSpector: warn 37 tokens original MIT

ref-lifecycle

15

PlamenTSV/plamen

Skill Claude CodeCodex

Type Thought-template (instantiate before use) - Trigger Pattern Always (Aptos Move) -- ConstructorRef/TransferRef/MintRef/BurnRef lifecycle.

not rated 306 +1 21d ago A SkillSpector: pass 35 tokens original MIT

semi-trusted-roles

16

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern SEMITRUSTEDROLE flag (required) - Inject Into Breadth agents, depth-state-trace.

not rated 306 +1 21d ago A SkillSpector: warn 29 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger SHAREALLOCATION flag detected in pattern scan - Used by Breadth agents, depth-edge-case.

not rated 306 +1 21d ago A SkillSpector: pass 26 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern TEMPORAL flag (required) - Inject Into Breadth agents, depth-state-trace.

not rated 306 +1 21d ago A SkillSpector: warn 28 tokens original MIT

token-flow-tracing

19

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern BALANCEDEPENDENT flag (required) - Inject Into Depth-token-flow, breadth agents.

not rated 306 +1 21d ago A SkillSpector: pass 25 tokens original MIT

type-safety

20

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Always (Aptos Move) - generic type exploitation - Inject Into Breadth agents, depth-state-trace.

not rated 306 +1 21d ago A SkillSpector: pass 28 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

How to prove a hypothesis is TRUE or FALSE using Move unit tests.

not rated 306 +1 21d ago A SkillSpector: pass 18 tokens original MIT

zero-state-return

22

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Vault/pool/first-depositor pattern detected - Inject Into Depth-edge-case.

not rated 306 +1 21d ago A SkillSpector: pass 21 tokens original MIT

authorization-model

23

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Always required for DAML audits - Inject Into Breadth agents, depth-state-trace, depth-external.

not rated 306 +1 21d ago A SkillSpector: pass 26 tokens original MIT

choice-semantics

24

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Always required for DAML audits - Inject Into Breadth agents, depth-state-trace, depth-edge-case.

not rated 306 +1 21d ago A SkillSpector: pass 28 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: