Command
audit-assist
Flow B — AI-assisted iterative audit with a human in the loop. Same lifecycle as audit-cycle, but pauses at checkpoints to surface confirmed findings, the…
Security
Command
/diff-audit
PR / commit-scoped differential audit — audits only changed functions (plus 1-hop callers), flags removed security checks, and prioritizes by risk × blast radius.
Install
> /plugin marketplace add solanabr/auditor-skill > /plugin install auditor@auditor
How it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/diff-audit
Context preview
What this command does when you run it.
PR / commit-scoped differential audit — audits only changed functions (plus 1-hop callers), flags removed security checks, and prioritizes by risk × blast radius.
Command definition
diff-audit.mdname: auditor:diff-audit description: PR / commit-scoped differential audit — audits only changed functions (plus 1-hop callers), flags removed security checks, and prioritizes by risk × blast radius. argument-hint: "[base..head | PR number]" allowed-tools: Read, Grep, Glob, Bash, Task
auditor-skill — Differential Audit (Mode 4)
**Arguments:** $ARGUMENTS
1. Compute the changed set: `git diff --name-only <base>..<head>` (default `main..HEAD`). 2. Run Phase 0.5 Context Reconstruction on changed functions + their direct callers/callees (1-hop). 3. Risk-classify changed files (auth / crypto / value-transfer / validation-removal = HIGH). Git-blame removed security code — code deleted in a "fix" / "CVE" commit is a CRITICAL regression. 4. Run only the checklist items + known-vectors matching the changed files' language/domain, through the Rule 5b gate. 5. Emit `audit_<n>/PR-REPORT.md` — changed-surface verdicts + findings only. Reuses the methodology corpus; skips whole-repo discovery.
Ships withauditor
Production-grade security audit for any codebase, powered by AI agents. 20 checklists · 1,413 verification items · 136 known attack vectors · executable PoCs + fix patches A full audit-firm lifecycle (automated + interactive) · Benchmarked against CertiK, SOC
Get the whole plugin
Stats
54
Stars
13
Forks
Active
Maintenance
Rust
Language
MIT
License
10d ago
Last commit
4mo ago
Created
Repo: solanabr/auditor-skill
Other commands on auditor.
Command
audit-cycle
Flow A — fully automated audit-firm lifecycle. Runs scope → context → tool-assisted first pass → domain-partitioned manual review → independent reconciliation…
Command
audit-report
Aggregate audit checkpoints into the final report — executive summary, Scope Coverage, findings by severity, maturity scorecard, and remediation roadmap.
Command
audit
Full scope-gated security audit of a Solana / full-stack repository — discovery, context reconstruction, per-item checklist verdicts, false-positive…
Command
deep-review
Deep single-instruction / single-function security review using the instruction worksheet, context reconstruction, and adversarial exploit modeling.
Command
economic-sim
Quantify a candidate economic finding — compute attack cost vs extractable value and, when possible, reproduce deposit→manipulate→withdraw against a Surfpool…