rea
Reverse engineer anything with agents, from app behavior down to native binaries.
420k
@morlutoSecurity
Plugin
skills
Security skills for auditing Solidity smart contracts, built by Pashov Audit Group. Includes tools to convert English properties into fuzz test assertions and to reconcile a fuzz harness with a changed source tree.
Plugin Signal73/100Solid
maintained94
capable53
documented71
adopted66
Claude Code
$ npx -y skills add pashov/skills --agent claude-code
Codex
$ npx skills add pashov/skills -a codex
Cursor
$ npx skills add pashov/skills -a cursor
Gemini CLI
$ npx skills add pashov/skills -a gemini-cli
GitHub Copilot
$ npx skills add pashov/skills -a github-copilot
OpenCode
$ npx skills add pashov/skills -a opencode
Windsurf
$ npx skills add pashov/skills -a windsurf
Stats
1,306
Stars
249
Forks
Active
Maintenance
JavaScript
Language
MIT
License
Last commit
Created
What's inside
2 Skills
/fizz-convertConvert English-language properties in PROPERTIES.md (produced by the Fizz skill) into Solidity assertions inside the existing fuzz harness, then flip their checkboxes. Trigger on "fizz-convert", "convert properties", "implement properties from PROPERTIES.md", "convert/fizz-syncReconcile an existing Fizz harness with a changed source tree. Detects added/removed/changed contract functions, quarantines stale properties, regenerates drifted handler stubs, and refreshes the snapshot. Trigger on "fizz-sync", "resync fuzzing", "sync fuzz harness", "refresh
10 Agents
README
Pashov Audit Group Skills
AI-powered Solidity security skills — built by Pashov Audit Group.
Supported AI Platforms:
Install, Run & Update Prompts
Install https://github.com/pashov/skills/ and run an x-ray on the codebase
Install https://github.com/pashov/skills/ and run solidity auditor with all different agents possible on the codebase
Install https://github.com/pashov/skills/ and run fizz on the codebase
run an x-ray on the codebase
run the solidity auditor with all the different agents possible on *specified files*
run fizz on the codebase
update skills to latest version
Skills
| Skill | Description |
|---|---|
| fizz | Generate a full Echidna/Medusa fuzz suite for any Foundry or Hardhat project |
| solidity-auditor | Solidity AI security audit - hundreds of Critical/High vulnerabilities found |
| x-ray | Pre-audit scan with threat model, invariants, entry points, and git analysis |
Contributing · Security · License · Contact
We welcome improvements and fixes. See CONTRIBUTING.md for the PR process.
Report vulnerabilities via Security Policy. This project follows the Contributor Covenant. MIT © contributors.
If you are looking to explore strategies for securing your project, reach out for a chat on Telegram @pashovkrum.
Stars on GitHub
Momentum
- stars in total
- 1.3k
File tree
Similar plugins.
See 12 pashov-skills alternatives
@morlutoreverse-skill
A skill pack for authorized reverse engineering, security research, and penetration testing that routes tasks to the right skill and sets up needed tools on demand. It covers API security assessment and Android APK analysis, among others.
46 skills44k
@zhaoxuya520cybersecurity-skills
Gives an AI agent the step-by-step workflow a senior security analyst follows, covering when to use each technique, what to check first, how to run it and how to verify the result. Covers incident response, forensics, threat intelligence, malware analysis, penetration testing and red teaming.
200 skills36k
@mukul975watermarks-remover
Agent skill + stdlib Python service to strip multi-vendor AI provenance marks from text and files, for privacy and hygiene on content you own. The skill is a thin client: it drives the machinery over HTTP, so the agent host needs no Python.
2 skills1 hook26k
@guillaumemeyerQuestions about skills.
Install it with the command on its page. It includes fizz-convert, fizz-sync. Its skills do not fire on their own yet. Free and open source.
- What is skills?
- pashov/skills is a set of AI-powered Solidity security skills and agents from Pashov Audit Group. It adds fizz-convert and fizz-sync for turning properties into fuzz assertions and reconciling harnesses with changed code.
- How do I install skills?
- Run these in Claude Code: npx -y skills add pashov/skills --agent claude-code. Then prompt normally.
- Does skills auto-invoke its skills?
- Not yet. It is indexed on Flowy as a plain plugin.
- Is skills free?
- Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.
- Which coding agents can use skills's skills?
- skills installs in Claude Code, and its skills also install in Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI. Each skill's page has the install command. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.
Is this plugin yours?
Claim it with GitHubSubmit a pluginPromote it