audit-changes
CommandAudit only the git diff vs main (or specified base). Optimized for PR review.
Generate a shareable PNG audit card from the latest /audit. Optimized for social media.
> /plugin marketplace add omermaksutii/RugProof> /plugin install rugproof@rugproof
description: Generate a shareable PNG audit card from the latest /audit. Optimized for social media. argument-hint: "[--out <path>] [--style classic|bear|hacker|minimal]" allowed-tools: Read, Write, Bash, Skill
Renders a 1200×1200 PNG (Twitter/X-card friendly) with the audit summary.
1. Pull the latest audit summary. 2. Pick the style from `$ARGUMENTS --style` or `.rugproof.yml report.audit_card.style`. Default `classic`.
3. Render the SVG template (`templates/audit-card.svg.hbs`) with the data. 4. Convert SVG → PNG using `resvg` (preferred, no headless browser) or `sharp` fallback. 5. Output to `--out` or `rugproof-reports/audit-card-<date>.png`.
Audit card written: rugproof-reports/audit-card-2026-05-12.png Dimensions: 1200×1200 Style: bear Grade: B Findings: 0C / 2H / 4M / 7L Share on Twitter? Run: /card --share twitter
If `.rugproof.yml report.audit_card.public_gallery_submit: true`, also POST the card + audit JSON to the gallery API. Returns a permalink URL the user can include in tweets.
Rugproof your code before someone else does. 🌐 Live site: omermaksutii.github.io/RugProof 📦 Latest: v1.0.0 — 45 commands · 23 agents · 45 skills · 13 MCP servers · tested, offline-first, with rule packs, a benchmark, non-EVM coverage, and post-deploy
Audit only the git diff vs main (or specified base). Optimized for PR review.
Deep audit — same as /audit but spawns more parallel subagents, runs multi-pass review, and chases exploit chains across files.
Audit third-party dependencies — resolve installed versions, cross-reference known-vulnerable releases, and flag vendored code…
Diff two Rugproof audit reports (before vs after) to track regressions — what's new, what's fixed, and whether the grade moved.
Pull past public audits (Code4rena, Sherlock, Spearbit, etc.) for a deployed contract or known protocol.
Audit a deployed contract on a live chain. Pulls verified source from the block explorer, optionally forks the chain for…
Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…
Check text against AGT prompt-injection, context-poisoning, and MCP threat detectors.
Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…