pantheraudits/move-auditor

이동-auditor Codex 및 Claude Code Skill for Move 스마트 컨트랙트 보안 감사

Panther의 내장

---

AI 코딩 에이전트를 이동 (Sui & Aptos) 스마트 계약 보안 감사관으로 전환하는 Codex 및 Claude 코드를위한 휴대용 기술 - 실제 악용에서 그려진 전투 테스트 취약 패턴, 당신이 열려있는 순간을 사냥 할 준비가 .move 파일.

** 전체 쓰기 업 : ** 이동 감사 - 블로그 게시물

---

특징

-220+ 취약 패턴 chain-agnostic, Sui-specific, Aptos-specific 및 DeFi 체크

• Auto-activates on .move 파일 - 설정 없음, 슬래시 명령 필요
• 8상 감사 워크플로우 — codebase mapping에서 확인, 삼위 보고서
• **Anti-false-positive 엔진 ** - 신뢰, 증거 사슬, FP 카탈로그 및 자기-hallucination 검사
• **빌딩 및 테스트 로그 분석 ** - arithmetic aborts, assertion 실패 및 #[expected_failure] anomalies -Production-surface parity — annotations와 auxiliary-tool 레이블이 실수로 생산 바이트 코드에 공공 돕기를 떠나지 않는다는 것을 검증합니다

move-auditor Codex and Claude Code skill for Move smart contract security auditing

Built by Panther

---

A portable skill for Codex and Claude Code that turns your AI coding agent into a Move (Sui & Aptos) smart contract security auditor — battle-tested vulnerability patterns drawn from real-world exploits, ready to hunt bugs the moment you open a .move file.

Read the full write-up: The Move Auditor — Blog Post

---

Features

• 220+ vulnerability patterns across chain-agnostic, Sui-specific, Aptos-specific, and DeFi checks
• Auto-activates on .move files — no setup, no slash commands needed
• 8-phase audit workflow — from codebase mapping to verified, triaged report
• Anti-false-positive engine — confidence gating, evidence chains, FP catalog, and self-hallucination checks
• Build & test log analysis — catches arithmetic aborts, assertion failures, and #[expected_failure] anomalies
• Production-surface parity — verifies that annotations and auxiliary-tool labels do not accidentally leave public helpers in production bytecode
• Signal-based coverage routing — detects protocol type and loads only relevant patterns
• DeFi deep-dive — 95 patterns covering staking, oracles, lending, liquidation, slippage, auctions, and signatures
• Semantic gap detection — stale state, accumulator drift, cross-module accounting desync
• Real-world validated — findings accepted into production codebases (see below)

---

Install

Codex

git clone https://github.com/pantheraudits/move-auditor.git
mkdir -p ~/.codex/skills
cp -r move-auditor ~/.codex/skills/move-auditor

Restart Codex after installing or updating so it reloads the skill index.

Update to latest:

cd move-auditor && git pull
rm -rf ~/.codex/skills/move-auditor
cp -r . ~/.codex/skills/move-auditor

Claude Code

git clone https://github.com/pantheraudits/move-auditor.git
mkdir -p ~/.claude/commands
cp -r move-auditor ~/.claude/commands/move-auditor

Restart Claude Code after installing or updating so it reloads the command.

Update to latest:

cd move-auditor && git pull