Fix verification
Skill Yue-Zhou1/zkcrypto-audit/plugins/core-audit-flow/skills/fix-verification
Use when a supplied patch claims to fix a previously verified ZK or cryptographic finding and the remediation needs independent verification.From its SKILL.md
npx -y skills add Yue-Zhou1/zkcrypto-audit --skill fix-verificationAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
1.9 KB, 391 tokens by cl100k_base, as published. Nobody here has run it
fix-verification
Verify that a patch removes the finding's invariant violation across every affected path; a blocked demonstration alone is not a fix.
Preconditions
- The finding is in
verified_findingsand has a reproducible PoC or trigger. fix_refidentifies the proposed fix and its target revision.- Otherwise, use
crypto-fp-check(unverified claim) orcrypto-report-writer(no patch to assess).
Review Method
- Record the vulnerable and fixed revisions; prove
fix_refis present. - Run the original PoC unchanged on both revisions and explain the changed result.
- State the violated invariant, inspect the diff, and test a variant that exercises the same root cause.
- Search sibling paths and review added code for equivalent omissions or new security regressions.
- Run relevant regression tests, assign a verdict, and update session state.
Use references/fix-verification-checklist.md as the evidence gate and
workflows/patch-review.md for the executable sequence. Critical/High fixes
require the same executable evidence standard as the original finding.
Output Contract
Produce:
finding_id,fix_ref,root_cause_status,regression_evidenceverdict:fixed,partially_fixed,not_fixed, orregressednext_route:closedonly when every targeted finding is fixed with evidence; otherwiseverification_in_progress
Reference Index
What ships with it: 5 files
7.6 KB alongside SKILL.md
agents/
- openai.yaml580 B
references/
- finding-patterns.md2.4 KB
- fix-verification-checklist.md1.2 KB
- spec-sources.md2.2 KB
workflows/
- patch-review.md1.3 KB