audit-changes
Audit only the git diff vs main (or specified base). Optimized for PR review.
Run forge coverage, identify untested branches, generate tests to close gaps.
> /plugin marketplace add omermaksutii/RugProof > /plugin install rugproof@rugproof
How it fires
How this command gets triggered: by you, by Claude, or both.
/coverageContext preview
What this command does when you run it.
Run forge coverage, identify untested branches, generate tests to close gaps.
description: Run forge coverage, identify untested branches, generate tests to close gaps. allowed-tools: Read, Write, Bash, Agent, mcp__forge-runner__*
mcp__forge-runner__coverage(format=json)
Returns per-file branch / line / function coverage.
For each file under `src/`:
For each gap, generate a test that exercises the uncovered path. Lean on `/test-gen` infrastructure.
Common gap patterns:
Verify the new tests close the gaps. Iterate.
Coverage:
Before: src/Vault.sol lines 78% / branches 71%
src/Oracle.sol lines 92% / branches 84%
After: src/Vault.sol lines 96% / branches 88% ✓
src/Oracle.sol lines 98% / branches 91% ✓
Generated:
test/generated/coverage/VaultGaps.t.sol (12 tests)
test/generated/coverage/OracleGaps.t.sol (4 tests)Rugproof your code before someone else does. 🌐 Live site: omermaksutii.github.io/RugProof 📦 Latest: v1.0.0 — 45 commands · 23 agents · 45 skills · 13 MCP servers · tested, offline-first, with rule packs, a benchmark, non-EVM coverage, and post-deploy
Repo: omermaksutii/RugProof
Audit only the git diff vs main (or specified base). Optimized for PR review.
Deep audit — same as /audit but spawns more parallel subagents, runs multi-pass review, and chases exploit chains across files.
Audit third-party dependencies — resolve installed versions, cross-reference known-vulnerable releases, and flag vendored code that has diverged from upstream.
Diff two Rugproof audit reports (before vs after) to track regressions — what's new, what's fixed, and whether the grade moved.
Pull past public audits (Code4rena, Sherlock, Spearbit, etc.) for a deployed contract or known protocol.
Audit a deployed contract on a live chain. Pulls verified source from the block explorer, optionally forks the chain for live-state simulation.