PlamenTSV/plamen

Autonomous Web3 security audit agent for Claude Code

This repository also configures its own agents. See what plamen tells them →

294Stars on the repository
109Mods indexed here, across every type
yesterdayLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Always required for DAML audits - Inject Into Breadth agents, depth-external, depth-edge-case.

not rated 294 +13 yesterday A SkillSpector: pass 28 tokens original MIT

contract-key-safety

26

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Always required for DAML audits (self-skips if no template defines a key) - Inject Into Breadth agents, depth-state-trace.

not rated 294 +13 yesterday A SkillSpector: pass 35 tokens original MIT

ensure-invariants

27

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Always required for DAML audits - Inject Into Breadth agents, depth-edge-case.

not rated 294 +13 yesterday A SkillSpector: pass 22 tokens original MIT

locking-semantics

28

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Always required for DAML audits (self-skips if no lock pattern present) - Inject Into Breadth agents, depth-state-trace, depth-edge-case.

not rated 294 +13 yesterday A SkillSpector: pass 38 tokens original MIT

privacy-disclosure

29

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger Pattern Always required for DAML audits - Inject Into Breadth agents, depth-edge-case.

not rated 294 +13 yesterday A SkillSpector: pass 22 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Type Thought-template (instantiate before use) - Trigger Pattern CROSSCHAINMSG flag detected (protocol RECEIVES cross-chain messages).

not rated 294 +13 yesterday A SkillSpector: warn 30 tokens original MIT

event-correctness

31

PlamenTSV/plamen

Skill Claude CodeCodex

Trigger 15 events detected in recon eventdefinitions.md (optional skill) - Used By breadth agents (assigned to core state or dedicated agent).

not rated 294 +13 yesterday A SkillSpector: pass 34 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Type Thought-template (instantiate before use) - Research basis Donation attacks via unsolicited token transfers.

not rated 294 +13 yesterday A SkillSpector: warn 24 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Type Thought-template (instantiate before use) - Trigger Pattern STORAGELAYOUT flag detected.

not rated 294 +13 yesterday A SkillSpector: warn 20 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Protocol Type Trigger accountabstraction (detected when ERC-4337 interfaces, EntryPoint, UserOperation, or Paymaster patterns found) - Inject Into Breadth agents, depth-external.

not rated 294 +13 yesterday A SkillSpector: warn 43 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

CROSSCHAINMESSAGEINTEGRITY audits messages the contract RECEIVES (decode, auth, replay). It does NOT audit whether the bytes the contract PRODUCES on the EVM side match the layout the destination VM expects. An EVM contract that packs a Solana account list, a Borsh struct, or a Bitcoin script with the wrong field…

not rated 294 +13 yesterday A SkillSpector: pass 0 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Protocol Type Trigger dexintegration (detected when recon finds swap|addLiquidity|removeLiquidity|IUniswapV2Router|ISwapRouter|amountOutMin|amountOutMinimum|slippage - AND the...

not rated 294 +13 yesterday A SkillSpector: pass 50 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Protocol Type Trigger governance (detected when Governor, Timelock, voting, proposal, quorum, delegate patterns found) - Inject Into Breadth agents, depth-external, depth-edge-case.

not rated 294 +13 yesterday A SkillSpector: warn 46 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

Protocol Type Trigger NAMEDEXTERNALPROTOCOL (detected when recon finds import/interface for an identifiable external protocol — not standard libraries). Researches known integration hazards of the target protocol.

not rated 294 +13 yesterday A SkillSpector: warn 41 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

L1 trigger - audits BLS signature aggregation: subgroup check, rogue-key attack defense, aggregation order, signing-domain separation.

not rated 294 +13 yesterday A SkillSpector: pass 32 tokens original MIT

config-correctness

40

PlamenTSV/plamen

Skill Claude CodeCodex

L1 trigger - audits configuration constants, documented bounds, feature-gated values, and unused protocol limits for semantic drift.

not rated 294 +13 yesterday A SkillSpector: warn 29 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

L1 trigger - audits consensus arithmetic for truncation, unused bounds, EMA direction, and threshold edge errors.

not rated 294 +13 yesterday A SkillSpector: pass 30 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

L1 trigger - detects non-determinism, state transition completeness violations, and safety/liveness invariant breaks in consensus code. Inject into depth-consensus-invariant or depth-state-trace.

not rated 294 +13 yesterday A SkillSpector: pass 45 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

L1 trigger - audits replay protection, transaction identity binding, and cross-layer uniqueness.

not rated 294 +13 yesterday A SkillSpector: pass 26 tokens original MIT

cosmos-ibc-security

44

PlamenTSV/plamen

Skill Claude CodeCodex

L1 trigger - audits IBC / ibc-go cross-chain entry points for ICS-23 / Merkle proof gaps, ordered-channel sequence integrity, escrow burn mint synchronization, light-client version downgrade, and timeout/ack handler reentrancy.

not rated 294 +13 yesterday A SkillSpector: pass 58 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

L1 trigger - audits Cosmos-SDK / CometBFT modules for consensus non-determinism, unmetered ABCI hooks, signer/state mismatches, module-account bookkeeping breaks, sdk.Dec rounding, ABCI-path panics, unregistered Msg handlers, and fee/gas overflow.

not rated 294 +13 yesterday A SkillSpector: warn 66 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

L1 trigger - audits L1/L2 boundary bugs, precompile context assumptions, integer width mismatches at environment boundaries, and EVM-on-non-EVM drift.

not rated 294 +13 yesterday A SkillSpector: pass 43 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

L1 supplement - audits storage / data-availability chains (Arweave / Celestia-class) for unenforced data commitments: producer commits to data inclusion but the validator never verifies the data was actually published / gossiped / sampled.

not rated 294 +13 yesterday A SkillSpector: pass 55 tokens original MIT

PlamenTSV/plamen

Skill Claude CodeCodex

L1 supplement - audits Go modules and Rust crates for known vulnerabilities, outdated versions, supply chain risks, and replace/patch directives.

not rated 294 +13 yesterday A SkillSpector: pass 33 tokens original MIT

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: