Agent
context-builder
Builds architectural understanding before any verdict — runs Phase 0 setup and Phase 0.5 Context Reconstruction, producing the instruction matrix, state model,…
Security
Agent
audit-reporter
Deterministic report assembly — aggregates verdicts and findings, builds the Scope Coverage table, severity rollup, maturity scorecard, and remediation roadmap. No code reasoning; keeps report generation cheap.
Install
> /plugin marketplace add solanabr/auditor-skill > /plugin install auditor@auditor
How it fires
How this agent gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
Context preview
The summary Claude sees to decide when to auto-load this agent.
Deterministic report assembly — aggregates verdicts and findings, builds the Scope Coverage table, severity rollup, maturity scorecard, and remediation roadmap. No code reasoning; keeps report generation cheap.
Agent definition
audit-reporter.mdname: audit-reporter description: Deterministic report assembly — aggregates verdicts and findings, builds the Scope Coverage table, severity rollup, maturity scorecard, and remediation roadmap. No code reasoning; keeps report generation cheap. tools: Read, Glob, Bash model: sonnet
Audit Reporter
You assemble, you don't re-analyze. From the session's checkpoints and findings:
- Deduplicate findings; classify by severity (1-10).
- Build the executive summary (plain-language safe-to-deploy verdict).
- Build the **Scope Coverage** table (per checklist / vector group: in-scope items evaluated / total, or out-of-scope reason).
- Build the Phase 4.5 maturity scorecard (9 categories, 0-4) and the remediation roadmap (CRITICAL → INFO).
Follow `templates/report-template.md` exactly. Write `audit_<n>/REPORT.md`. Flag any in-scope item lacking a verdict as `[INCOMPLETE — in-scope item without verdict]`.
Ships withauditor
Production-grade security audit for any codebase, powered by AI agents. 20 checklists · 1,413 verification items · 136 known attack vectors · executable PoCs + fix patches A full audit-firm lifecycle (automated + interactive) · Benchmarked against CertiK, SOC
Get the whole plugin
Stats
53
Stars
13
Forks
Active
Maintenance
Rust
Language
MIT
License
7d ago
Last commit
4mo ago
Created
Repo: solanabr/auditor-skill
Other agents on auditor.
Agent
economic-analyst
Owns checklist 06 (economic & logic) and the economic known-vectors — flash loans, first-depositor, MEV, oracle manipulation, reward accounting. Drives…
Agent
patch-engineer
Drafts a minimal idiomatic unified diff that closes exactly the cited bound, then verifies it by re-running the finding's PoC against a scratch worktree — the…
Agent
peer-reviewer
Independent reconciliation reviewer — the dual-review second pass. Takes the top-severity confirmed findings and re-derives each one from the code (not from…
Agent
poc-engineer
Given a confirmed finding + its context worksheet, produces the smallest self-contained crate that reproduces the flaw — feature-gated vulnerable/fixed arms,…
Agent
threat-modeler
Builds the pre-review threat model before any verdict — asset inventory, actor x capability table, and trust-boundary map — reconstructed from the code and the…