pantheraudits/move-auditor
Developer toolsこのページは AI により自動翻訳されています。技術的な詳細は原文をご確認ください。 原文を見る
Skill for move smart contract security auditing.
概要
move-auditor Codex and Claude Code skill for Move smart contract security auditing A portable skill for Codex and Claude Code that turns your AI coding agent into a Move (Sui & Aptos) smart contract security auditor — battle-tested vulnerability patterns drawn from real-world exploits, ready to hunt bugs the moment you open a .move file. - across chain-agnostic, Sui-specific, Aptos-specific, and DeFi checks - on .move files — no setup, no slash commands needed - — from codebase mapping to verified, triaged report - — confidence gating, evidence chains, FP catalog, and self-hallucination checks - — catches arithmetic aborts, assertion failures, and #[expected_failure] anomalies - — verifies that annotations and auxiliary-tool labels do not accidentally leave public helpers in production bytecode - — detects protocol type and loads only relevant patterns - — 95 patterns covering staking, oracles, lending, liquidation, slippage, auctions, and signatures - — stale state, accumulator...
README
以下は原文 README の抜粋です。原文を見る。
move-auditor Codex and Claude Code skill for Move smart contract security auditing
Built by Panther
A portable skill for Codex and Claude Code that turns your AI coding agent into a Move (Sui & Aptos) smart contract security auditor — battle-tested vulnerability patterns drawn from real-world exploits, ready to hunt bugs the moment you open a .move file.
Read the full write-up: The Move Auditor — Blog Post
Features
- 220+ vulnerability patterns across chain-agnostic, Sui-specific, Aptos-specific, and DeFi checks
- Auto-activates on
.movefiles — no setup, no slash commands needed - 8-phase audit workflow — from codebase mapping to verified, triaged report
- Anti-false-positive engine — confidence gating, evidence chains, FP catalog, and self-hallucination checks
- Build & test log analysis — catches arithmetic aborts, assertion failures, and
#[expected_failure]anomalies - Production-surface parity — verifies that annotations and auxiliary-tool labels do not accidentally leave public helpers in production bytecode
- Signal-based coverage routing — detects protocol type and loads only relevant patterns
- DeFi deep-dive — 95 patterns covering staking, oracles, lending, liquidation, slippage, auctions, and signatures
- Semantic gap detection — stale state, accumulator drift, cross-module accounting desync
- Real-world validated — findings accepted into production codebases (see below)
Install
Codex
git clone https://github.com/pantheraudits/move-auditor.git
mkdir -p ~/.codex/skills
cp -r move-auditor ~/.codex/skills/move-auditor
Restart Codex after installing or updating so it reloads the skill index.
Update to latest:
cd move-auditor && git pull
rm -rf ~/.codex/skills/move-auditor
cp -r . ~/.codex/skills/move-auditor
Claude Code
git clone https://github.com/pantheraudits/move-auditor.git
mkdir -p ~/.claude/commands
cp -r move-auditor ~/.claude/commands/move-auditor
Restart Claude Code after installing or updating so it reloads the command.
Update to latest:
cd move-auditor && git pull推奨ツール
別のキーワードを試すか、フィルタを外してください。
インストール
npx skillfish add pantheraudits/move-auditor