Audit common
Skill Yue-Zhou1/zkcrypto-audit/plugins/core-audit-flow/skills/audit-common
An agentic skills framework for security auditing of zero-knowledge systems and cryptographic protocols.
npx -y skills add Yue-Zhou1/zkcrypto-audit --skill audit-commonAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Provides shared severity, testing-evidence, and finding-contract references for ZK and cryptographic audit skills. Use when classifying findings, checking whether test evidence is sufficient, or writing findings in a consistent structure.
SKILL.md
1.5 KB, as published. Nobody here has run it
audit-common
Shared reference layer for the crypto audit framework.
When to Use
- Classifying a suspected finding as Critical, High, Medium, or Low
- Checking whether existing tests are strong enough to support a claim
- Writing or reviewing a finding that should follow the framework's standard structure
- Keeping sibling audit skills aligned on severity and evidence language
When NOT to Use
- Building initial audit context for a target codebase
- Verifying whether a suspected bug is real end-to-end
- Querying prior-art or disclosure state in
zkbugs-index
How to Use
Read the smallest reference that answers the current question:
- Severity question:
references/severity-framework.md - Test evidence question:
references/testing-evidence.md - Finding structure question:
references/finding-contract.md
Do not duplicate these definitions in sibling skills unless the duplication is strictly necessary for execution.