Auditor Skill
AUDIT SKILL — Comprehensive on-chain Solana program auditor and full-stack security review for ANY programming language. USE FOR: auditing Solana/Anchor programs, reviewing smart contract security, checking for vulnerabilities (missing signers, unchecked accounts, arithmetic overflow, CPI attacks, PDA confusion, type cosplay, reinitialization, flash loan exploits, MEV, governance backdoors, timelock bypass), auditing TypeScript/Python/Go/Java/Ruby/PHP/any language, backend/frontend code review, supply chain safety, CI/CD and GitHub Actions workflow security (comment-triggered commands, pul
Install
npx skills add solanabr/auditor-skill --skill auditor-skillgit clone --depth 1 https://github.com/solanabr/auditor-skill.git /tmp/auditor-skill
mkdir -p ~/.claude/skills
cp -r /tmp/auditor-skill/. ~/.claude/skills/auditor-skillPersonal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.
From the SKILL.md
# auditor-skill — Multi-Language Security Audit Skill > **Version:** 7.6\ > **Items:** 1,446 across 20 checklists (+ 140 known vectors)\ > **Languages:** Rust, TypeScript, Python, Go, Java, Ruby, PHP, + any via general checklist > **Severity:** 1–10 numeric scale > **Benchmarked against:** CertiK (crypto audit), EY/SOC 2/COBIT (traditional IT audit), OWASP Top 10:2025 > **Designed for:** Autonomous AI auditor agent or human-guided review --- ## SCOPE-GATED LOADING — Load What The Repo Needs auditor-skill does not read its whole corpus up front. It discovers the repo, declares a scope, loads only what that scope requires, then guarantees a verdict for every in-scope item. **Step 1 — Discover (cheap, always).** Enumerate file extensions and markers (`Anchor.toml`, `Cargo.toml`, `package.json`, `*.py`, `.github/`). No checklists or vectors loaded yet. **Step 2 — Declare scope.** Map detected languages (+ any `--scope`) to the in-scope checklist set: | Detected | Load checklists | |----------|-----------------| | `.rs` / `Anchor.toml` | 01–07 (+ 20 for `.rs` outside `programs/`) | | `.ts` / `.tsx` | 08 (+ 09 if backend, + 10 if web) | | `.py` | 14 | | `.go` / `.java` / `.rb` / `.php` / other | 15 | | AI / agent components (`.mcp.json`, agent SDKs) | 19 | | **any repo** | 11, 12, 13, 16, 17, 18 | Checklists outside this set are **never read** — a Rust-only repo never loads 14 or the TS/web vectors.
Details
- Skill name
auditor-skill- Repository
- solanabr/auditor-skill
- License
- MIT
- Repo updated
- 26 October 2026
FAQ
What does the Auditor Skill skill do?
**AUDIT SKILL** — Comprehensive on-chain Solana program auditor and full-stack security review for ANY programming language. USE FOR: auditing Solana/Anchor programs, reviewing smart contract security, checking for vulnerabilities (missing signers, unchecked accounts, arithmetic overflow, CPI attacks, PDA confusion, type cosplay, reinitialization, flash loan exploits, MEV, governance backdoors, timelock bypass), auditing TypeScript/Python/Go/Java/Ruby/PHP/any language, backend/frontend code review, supply chain safety, CI/CD and GitHub Actions workflow security (comment-triggered commands, pul
How do I install the Auditor Skill skill?
skills CLI (Claude Code, Cursor, Codex and more): npx skills add solanabr/auditor-skill --skill auditor-skill. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.
Is Auditor Skill popular?
It lives in solanabr/auditor-skill, which has 63 GitHub stars and 13 forks.
Related skills
Malware Analysis
54gl0bal01/malware-analysis-claude-skills
Orchestrate the complete malware analysis lifecycle across triage, dynamic analysis, detection engineering, and report writing. Use as the single entry point for any malware analysis task — routes to specialized sub-skills by file type and phase, carries findings between phases, and supports multi-sample batch workflows.
Claude Pentest Skills
66frendysanusi/claude-pentest-skills
Structured web application penetration testing with OWASP methodology, curated payload references, 6-gate validation, and professional report generation
Secscan
51atgreen/secscan-skill
In-session, token-efficient LLM security scan of a repo (SAST triage). A lightweight, native Claude Code pipeline — survey → threat-model → deep-dive → adversarial-verify → report — using Read/Grep/Glob (and optional subagents), no external tooling. Use when asked to "security scan", "find vulnerabilities", "SAST", "audit this code for security", or "secscan".
Security Guide
139jnMetaCode/shellward
OpenClaw 安全部署指南 / Security deployment guide — help users secure their OpenClaw installation
Security Scan
42chaenmasahiro0425/claude-security-scan
開発者のPC・手元のgitリポジトリ・GitHub・Vercelと公開サイト・クラウド(AWS / Google Cloud / Azure / Cloudflare / Supabase)・Gmailを読み取り専用で横断スキャンし、重要度別のHTMLレポートと前回からの差分を出すスキル。「セキュリティチェックして」「セキュリティスキャン」「脆弱性ないか見て」「APIキー漏れてない?」「乗っ取られてないか確認」「新しく出たリスクだけ教えて」「毎週スキャンを設定して」等で使う。設定の変更・送信・削除はしない。直すときは1件ずつ利用者の承認を取る。
Find Bugs
1.1kgetsentry/skills
Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.
Browse the most popular Claude skills, all security skills, or write your own with the skills generator.