Topic: security-audit
144 skills in this topic.
-
cross-chain-timing
Trigger Pattern stellar_bridge|soroban_bridge|horizon|anchor_protocol|bridge|cross_chain|relay|wormhole|allbridge|debridge|axelar|LayerZero|sequence|emitter - Inject Into Breadth agents, depth-external
PlamenTSV/plamen 215
-
custom-type-safety
Trigger Pattern contractimport! or contracttype detected - Inject Into Breadth agents, depth-external
PlamenTSV/plamen 215
-
economic-design-audit
Trigger Pattern MONETARY_PARAMETER flag (fee, rate, emission, cap, bps values) - Inject Into Breadth agents (merged via M4 hierarchy)
PlamenTSV/plamen 215
-
flash-loan-interaction
Trigger Pattern FLASH_LOAN flag (required) or BALANCE_DEPENDENT flag (optional complement) - Inject Into Breadth agents, depth-token-flow, depth-edge-case
PlamenTSV/plamen 215
-
fork-ancestry
Trigger Pattern Always (run during recon TASK 0, not breadth) - Inject Into Recon agent only (meta_buffer.md enrichment)
PlamenTSV/plamen 215
-
migration-analysis
Trigger Pattern Contract upgrades via update_current_contract_wasm, storage migration, deprecated functions, token migrations - Inject Into Breadth agents, depth-state-trace
PlamenTSV/plamen 215
-
overflow-safety
Trigger Pattern Always required for Soroban audits - Inject Into Breadth agents, depth-edge-case
PlamenTSV/plamen 215
-
semi-trusted-roles
Trigger Pattern operator/keeper/crank require_auth checks, authority-gated functions - Inject Into Breadth agents, depth-state-trace
PlamenTSV/plamen 215
-
sep41-token-safety
Trigger Pattern SEP-41 token patterns detected (approve/transfer/transfer_from/allowance/balance) - Inject Into Breadth agents, depth-token-flow, depth-edge-case
PlamenTSV/plamen 215
-
share-allocation-fairness
Trigger Pattern SHARE_ALLOCATION flag detected in pattern scan - Inject Into Breadth agents, depth-edge-case
PlamenTSV/plamen 215
-
temporal-parameter-staleness
Trigger Pattern interval|period|duration|delay|cooldown|lock_period|timelock|unbonding|claim_delay|withdraw_delay|maturity|ledger_sequence|timestamp - Inject Into Breadth agents, depth-state-trace
PlamenTSV/plamen 215
-
token-flow-tracing
Trigger Pattern SEP-41 token transfers, TokenClient::new, transfer/transfer_from/burn, XLM native balance - Inject Into Lifecycle, External-Env agents
PlamenTSV/plamen 215
-
verification-protocol
Trigger Pattern Always (used by all verifier agents) - Inject Into security-verifier agents (Phase 5)
PlamenTSV/plamen 215
-
zero-state-return
Trigger Always inject into Arithmetic agent (extends existing ZERO_STATE_ECONOMICS) - Purpose Check protocol return-to-zero state, not just initial zero state
PlamenTSV/plamen 215
-
ability-analysis
Trigger Pattern Always (Sui Move) -- foundational security check - Inject Into Breadth agents, depth agents
PlamenTSV/plamen 215
-
bit-shift-safety
Trigger Pattern Always (Sui Move) -- Move VM aborts on shift = bit width - Inject Into Breadth agents, depth-edge-case
PlamenTSV/plamen 215
-
centralization-risk
Trigger Pattern Protocol has privileged capabilities (AdminCap, OwnerCap, UpgradeCap, TreasuryCap, custom caps) - Inject Into Breadth agents (optional), depth-state-trace
PlamenTSV/plamen 215
-
dependency-audit
Trigger Pattern EXTERNAL_LIB flag (third-party Move dependencies detected in Move.toml beyond Sui framework) - Inject Into Breadth agents, depth-external
PlamenTSV/plamen 215
-
economic-design-audit
Trigger Pattern MONETARY_PARAMETER flag (required) - Inject Into Breadth agents (merged via M4 hierarchy)
PlamenTSV/plamen 215
-
external-precondition-audit
Trigger Pattern Any external package function call detected in program - Inject Into Breadth agents (merged via M5 hierarchy)
PlamenTSV/plamen 215
-
flash-loan-interaction
Trigger Pattern FLASH_LOAN flag (required) or BALANCE_DEPENDENT flag (optional complement) - Inject Into Breadth agents, depth-token-flow, depth-edge-case
PlamenTSV/plamen 215
-
fork-ancestry
Trigger Pattern Always (run during recon TASK 0, not breadth) - Inject Into Recon agent only (meta_buffer.md enrichment)
PlamenTSV/plamen 215
-
migration-analysis
Trigger Pattern Package upgrades, version transitions, deprecated functions, object layout changes - Inject Into Breadth agents, depth-state-trace
PlamenTSV/plamen 215
-
move-safety-core-directives
Lightweight core directives for Sui Move always-required skills — injected into every breadth agent. Full methodology lives in the dedicated Move-Safety Agent.
PlamenTSV/plamen 215