任何代码库的生产级安全审计，由AI代理驱动。 20个检查列表 ·1,446个验证项目 ·140个已知攻击向量 ·可执行的PoC+修复补丁 完整的审计公司生命周期（自动化 + 互动）·以CertiK、SOC 2、OWASP十大榜单为基准测试：2025 核实 COSTS.md 作为推荐人——进行审计可能会消耗大量信用。

---

这是什么？

auditor-skill 是一个 skill 文件（结构化提示词 + 检查列表），它能将任何 LLM 代理（Copilot、Cursor、Windsurf、Claude Code、Codex 等）变成专业级安全审计员。它逐文件读取你的代码文件，检查 20 个安全领域的 1,446 个项目，针对 140 种真实世界攻击向量进行测试，并生成带有严重度评分的结构化报告。

**它不是SaaS产品。**它是一个你为AI代理安装的标记文件文件夹——在你审计的任何仓库之外——或者发送到LLM API。

使用前需进行适应。 该技能最初是为某个特定的Solana/Anchor DeFi项目开发的，后来进行了推广。discovery/file-map.md假设该项目的布局（programs/{name}/src/、apps/backend/src/、apps/web/src/）。

auditor-skill — Open-Source AI Security Audit Skill

Production-grade security audit for any codebase, powered by AI agents. 20 checklists · 1,446 verification items · 140 known attack vectors · executable PoCs + fix patches A full audit-firm lifecycle (automated + interactive) · Benchmarked against CertiK, SOC 2, OWASP Top 10:2025 Verify COSTS.md as a referecence - Running this audit can burn a lot of credits.

---

What Is This?

auditor-skill is a skill file (a structured prompt + checklists) that turns any LLM agent (Copilot, Cursor, Windsurf, Claude Code, Codex, etc.) into a professional-grade security auditor. It reads your code file by file, checks 1,446 items across 20 security domains, tests against 140 real-world attack vectors, and produces a structured report with severity scores.

It is not a SaaS product. It’s a folder of markdown files you install for your AI agent — outside any repository you audit — or send to an LLM API.

Adaptation required before use. This skill was originally developed for a specific Solana/Anchor DeFi project and then generalized. discovery/file-map.md assumes that project’s layout (programs/{name}/src/, apps/backend/src/, apps/web/src/). If yours differs, record where your code lives at intake instead: the in-scope paths under QUESTIONS.md Q39 (“Specific files/modules”) and the exclusions under Q44, which /auditor:intake writes to audit_/intake.md §1. An edited discovery/file-map.md in a shared or plugin install is lost on the next update. The questionnaire in QUESTIONS.md is a blank template — fill it out (or run /auditor:intake) for your project before invoking the auditor. Everything else (checklists, known vectors, output rules) is fully portable as-is.

---

What It Does (v7.6)

• Detection & response, post-incident (v7.6). /auditor:hunt works through transaction history, program logs and Geyser/indexer exports with a written hypothesis ledger; /auditor:respond starts from a signature, address or alert and establishes whether the attack landed, how far it reached, and why. Verdicts follow a single ladder; the response plan is for humans to carry out — the track acts on nothing. Ported Solana-native from Anthropic’s defending-code-reference-harness.