pantheraudits/move-auditor

移动审计器 Codex 和 Claude Code 技能用于 Move 智能合约安全审计

由豹式建造

---

一款适用于Codex和Claude Code的便携技能，将你的AI编码代理变成Move（Sui和Aptos）智能合约安全审计员——基于真实利用的经过实战验证的漏洞模式，一旦你打开.move文件，便准备搜寻漏洞。

阅读完整文章： 搬家审计员 — 博客文章

---

特色

• 220+漏洞模式，涵盖链无关、Sui专属、Aptos专属和DeFi检查
• **自动激活[.move文件 — 无需设置，无需斜杠命令
• 8阶段审计工作流程 — 从代码库映射到验证、分流报告
• 反误报引擎 — 置信门控、证据链、FP目录和自我幻觉检查
• 构建与测试日志分析 — 捕捉算术中止、断言失败和#[expected_failure]异常
• 生产面奇偶校验 — 验证注释和辅助工具标签不会意外在生产字节码中留下公共助手

move-auditor Codex and Claude Code skill for Move smart contract security auditing

Built by Panther

---

A portable skill for Codex and Claude Code that turns your AI coding agent into a Move (Sui & Aptos) smart contract security auditor — battle-tested vulnerability patterns drawn from real-world exploits, ready to hunt bugs the moment you open a .move file.

Read the full write-up: The Move Auditor — Blog Post

---

Features

• 220+ vulnerability patterns across chain-agnostic, Sui-specific, Aptos-specific, and DeFi checks
• Auto-activates on .move files — no setup, no slash commands needed
• 8-phase audit workflow — from codebase mapping to verified, triaged report
• Anti-false-positive engine — confidence gating, evidence chains, FP catalog, and self-hallucination checks
• Build & test log analysis — catches arithmetic aborts, assertion failures, and #[expected_failure] anomalies
• Production-surface parity — verifies that annotations and auxiliary-tool labels do not accidentally leave public helpers in production bytecode
• Signal-based coverage routing — detects protocol type and loads only relevant patterns
• DeFi deep-dive — 95 patterns covering staking, oracles, lending, liquidation, slippage, auctions, and signatures
• Semantic gap detection — stale state, accumulator drift, cross-module accounting desync
• Real-world validated — findings accepted into production codebases (see below)

---

Install

Codex

git clone https://github.com/pantheraudits/move-auditor.git
mkdir -p ~/.codex/skills
cp -r move-auditor ~/.codex/skills/move-auditor

Restart Codex after installing or updating so it reloads the skill index.

Update to latest:

cd move-auditor && git pull
rm -rf ~/.codex/skills/move-auditor
cp -r . ~/.codex/skills/move-auditor

Claude Code

git clone https://github.com/pantheraudits/move-auditor.git
mkdir -p ~/.claude/commands
cp -r move-auditor ~/.claude/commands/move-auditor

Restart Claude Code after installing or updating so it reloads the command.

Update to latest:

cd move-auditor && git pull