Our security skills, free for every AI agent.

The way our researchers work, packaged as skills your coding agent can run: a pre-audit x-ray, a twelve-agent Solidity auditor and a fuzz suite generator. One prompt installs them.

Stars: 1.3k
Forks: 249
License: MIT

Star on GitHub

Works with Claude Code, Cursor, Codex, GitHub Copilot and Windsurf.

From people who use them

What people found with the skills.

Public posts on X. Each card opens the original post.

Now Critical, initially closed as Out of Scope
“One of my @HackenProof submissions is now Critical, initially closed as Out of Scope. Used Solidity Auditor by @pashov / @0xFireFist as part of my workflow.”
firmanregar@0xfirmanregar · 2 Oct 2026
A quick valid High bug on a newly deployed contract, and a bounty
“Kudos to @pashov's solidity auditor skill. It helped me to uncover a quick valid High bug on a newly deployed contract, and earn a bounty.”
4gontuk@4gontuk · 26 Jul 2026
Genuinely accelerated how I move through a codebase
“I have been using it during my audit process and it has genuinely accelerated how I move through a codebase.”
VenkiKrishna_VK@VenkiKrishna_VK · 26 Jul 2026
Helped me directly find bugs, in this one it found me the lead
“Helped me directly find bugs in some cases, in this one it found me the lead.”
Samarth@Sam39741 · 28 Oct 2026
I am shocked how good it is
“Been using @pashov skills myself, configured little bit for myself and i am shocked how good it is. Been benchmarking it with all hacks in last 2 years.”
Frappuccino@frappuccino_xbt · 27 Oct 2026
Solidity auditor helped with the finding
“This was for a bounty program and solidity auditor helped with the finding.”
Harvesto@Harvesto12 · 16 Oct 2026

Skills

Three skills, one install.

x-rayPre-audit scan
Know your protocol before auditors do.
A briefing to read before opening the first file: threat model, invariants, entry points, test gaps and git history, ending in a readiness verdict and action items.
x-ray.mdentry-points.mdinvariants.mdarchitecture.svg
Source
solidity-auditorAI security audit
Findings in minutes, not weeks.
Twelve specialised hacking agents review your contracts in parallel. Loop mode runs several passes, each told what the last found, so it hunts new ground and ends in one report.
full-report.md
Source Launch post
fizzFuzz suite generator
A full fuzz suite in minutes.
Stateful Echidna and Medusa campaigns for any Foundry or Hardhat project: handlers, invariants in plain English and a reproduction test for every violation found.
test/fizz/PROPERTIES.mdreport.md
Source Launch post

Usage

No setup. Just ask your agent.

Paste a prompt into your agent. It installs what it needs and runs the skill. Smaller scope means denser context, so point it at the contracts you are actively changing.

Install and run

First time: one prompt installs the skills and starts a scan.

Run

Already installed: point a skill at the whole repo or at the contracts you are changing.

Update

Pull the latest version of every skill.

Our security skills, free for every AI agent.

What people found with the skills.

Three skills, one install.

Know your protocol before auditors do.

Findings in minutes, not weeks.

A full fuzz suite in minutes.

No setup. Just ask your agent.

Install and run

Run

Update

Improve the skills with us.