Commitment scheme auditor

Skill Yue-Zhou1/zkcrypto-audit/plugins/crypto-primitive-auditors/skills/commitment-scheme-auditor

Audit polynomial commitment schemes (KZG, FRI, IPA, Pedersen) for degree bound enforcement, evaluation proof verification, trusted setup provenance, and batch opening soundness.From its SKILL.md

Install

npx -y skills add Yue-Zhou1/zkcrypto-audit --skill commitment-scheme-auditor

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

2.4 KB, 461 tokens by cl100k_base, as published. Nobody here has run it

commitment-scheme-auditor

Domain auditor for polynomial commitment correctness and soundness assumptions.

When to Use

Reviewing KZG, FRI, IPA, or Pedersen commitment implementations
Auditing degree bound checks and evaluation proof verification logic
Checking trusted setup provenance and SRS handling
Reviewing batch opening/random-combination security assumptions

When NOT to Use

Hash primitive parameter audits without commitment verifier context
Generic transcript concerns with no commitment operation on path
Marking suspected commitment issues as confirmed without verification gates

Core Review Areas

Degree bound enforcement on committed polynomials
Evaluation proof verification at correct points and values
Trusted setup and parameter provenance integrity
Batch opening randomness and binding
Scheme-specific checks (FRI query schedule, IPA generator independence)

Workflow

Phase 1: Scheme and parameter inventory

Read references/commitment-checklist.md
Identify commitment scheme(s), parameter sets, and verifier pathways
Mark any dynamic or external parameter loading points

Phase 2: Opening verification review

Execute workflows/kzg-review.md
Verify opening equations, evaluation point ownership, and transcript binding
Check degree bound checks occur before accepting commitment/opening tuples

Phase 3: Pattern hunt

Read references/finding-patterns.md
Prioritize missing degree checks, premature challenge derivation, and untrusted setup loads

Phase 4: Handoff

Send surviving findings to crypto-fp-check
Use zkbugs-index only after verification succeeds

Output Contract

Produce a commitment-audit handoff that includes:

The scheme variant (KZG/FRI/IPA/Pedersen) and proof path involved
The exact bound, opening, or setup integrity gap
Whether the issue affects soundness, completeness, or configuration trust
The next verification or reporting route

Reference Index

What ships with it: 4 files

3.5 KB alongside SKILL.md