pantheraudits/move-auditor

move-auditor Codex and Claude Code skill for Move smart contract security auditing

Built by Panther

---

A portable skill for Codex and Claude Code that turns your AI coding agent into a Move (Sui & Aptos) smart contract security auditor — battle-tested vulnerability patterns drawn from real-world exploits, ready to hunt bugs the moment you open a .move file.

Read the full write-up: The Move Auditor — Blog Post

---

Features

• 220+ vulnerability patterns across chain-agnostic, Sui-specific, Aptos-specific, and DeFi checks
• Auto-activates on .move files — no setup, no slash commands needed
• 8-phase audit workflow — from codebase mapping to verified, triaged report
• Anti-false-positive engine — confidence gating, evidence chains, FP catalog, and self-hallucination checks
• Build & test log analysis — catches arithmetic aborts, assertion failures, and #[expected_failure] anomalies
• Production-surface parity — verifies that annotations and auxiliary-tool labels do not accidentally leave public helpers in production bytecode
• Signal-based coverage routing — detects protocol type and loads only relevant patterns
• DeFi deep-dive — 95 patterns covering staking, oracles, lending, liquidation, slippage, auctions, and signatures
• Semantic gap detection — stale state, accumulator drift, cross-module accounting desync
• Real-world validated — findings accepted into production codebases (see below)

---

Install

Codex

git clone https://github.com/pantheraudits/move-auditor.git
mkdir -p ~/.codex/skills
cp -r move-auditor ~/.codex/skills/move-auditor

Restart Codex after installing or updating so it reloads the skill index.

Update to latest:

cd move-auditor && git pull
rm -rf ~/.codex/skills/move-auditor
cp -r . ~/.codex/skills/move-auditor

Claude Code

git clone https://github.com/pantheraudits/move-auditor.git
mkdir -p ~/.claude/commands
cp -r move-auditor ~/.claude/commands/move-auditor

Restart Claude Code after installing or updating so it reloads the command.

Update to latest:

cd move-auditor && git pull