audit-changes
Audit only the git diff vs main (or specified base). Optimized for PR review.
Generate a shareable PNG audit card from the latest /audit. Optimized for social media.
> /plugin marketplace add omermaksutii/RugProof > /plugin install rugproof@rugproof
How it fires
How this command gets triggered: by you, by Claude, or both.
/cardContext preview
What this command does when you run it.
Generate a shareable PNG audit card from the latest /audit. Optimized for social media.
description: Generate a shareable PNG audit card from the latest /audit. Optimized for social media. argument-hint: "[--out <path>] [--style classic|bear|hacker|minimal]" allowed-tools: Read, Write, Bash, Skill
Renders a 1200×1200 PNG (Twitter/X-card friendly) with the audit summary.
1. Pull the latest audit summary. 2. Pick the style from `$ARGUMENTS --style` or `.rugproof.yml report.audit_card.style`. Default `classic`.
3. Render the SVG template (`templates/audit-card.svg.hbs`) with the data. 4. Convert SVG → PNG using `resvg` (preferred, no headless browser) or `sharp` fallback. 5. Output to `--out` or `rugproof-reports/audit-card-<date>.png`.
Audit card written: rugproof-reports/audit-card-2026-05-12.png Dimensions: 1200×1200 Style: bear Grade: B Findings: 0C / 2H / 4M / 7L Share on Twitter? Run: /card --share twitter
If `.rugproof.yml report.audit_card.public_gallery_submit: true`, also POST the card + audit JSON to the gallery API. Returns a permalink URL the user can include in tweets.
Rugproof your code before someone else does. 🌐 Live site: omermaksutii.github.io/RugProof 📦 Latest: v1.0.0 — 45 commands · 23 agents · 45 skills · 13 MCP servers · tested, offline-first, with rule packs, a benchmark, non-EVM coverage, and post-deploy
Repo: omermaksutii/RugProof
Audit only the git diff vs main (or specified base). Optimized for PR review.
Deep audit — same as /audit but spawns more parallel subagents, runs multi-pass review, and chases exploit chains across files.
Audit third-party dependencies — resolve installed versions, cross-reference known-vulnerable releases, and flag vendored code that has diverged from upstream.
Diff two Rugproof audit reports (before vs after) to track regressions — what's new, what's fixed, and whether the grade moved.
Pull past public audits (Code4rena, Sherlock, Spearbit, etc.) for a deployed contract or known protocol.
Audit a deployed contract on a live chain. Pulls verified source from the block explorer, optionally forks the chain for live-state simulation.