agentsclimarketplace

Commitment scheme auditor

Skill Yue-Zhou1/zkcrypto-audit/plugins/crypto-primitive-auditors/skills/commitment-scheme-auditor

An agentic skills framework for security auditing of zero-knowledge systems and cryptographic protocols.

Install
npx -y skills add Yue-Zhou1/zkcrypto-audit --skill commitment-scheme-auditor

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Audit polynomial commitment schemes (KZG, FRI, IPA, Pedersen) for degree bound enforcement, evaluation proof verification, trusted setup provenance, and batch opening soundness.

SKILL.md

2.4 KB, as published. Nobody here has run it

commitment-scheme-auditor

Domain auditor for polynomial commitment correctness and soundness assumptions.

When to Use

  • Reviewing KZG, FRI, IPA, or Pedersen commitment implementations
  • Auditing degree bound checks and evaluation proof verification logic
  • Checking trusted setup provenance and SRS handling
  • Reviewing batch opening/random-combination security assumptions

When NOT to Use

  • Hash primitive parameter audits without commitment verifier context
  • Generic transcript concerns with no commitment operation on path
  • Marking suspected commitment issues as confirmed without verification gates

Core Review Areas

  1. Degree bound enforcement on committed polynomials
  2. Evaluation proof verification at correct points and values
  3. Trusted setup and parameter provenance integrity
  4. Batch opening randomness and binding
  5. Scheme-specific checks (FRI query schedule, IPA generator independence)

Workflow

Phase 1: Scheme and parameter inventory

  • Read references/commitment-checklist.md
  • Identify commitment scheme(s), parameter sets, and verifier pathways
  • Mark any dynamic or external parameter loading points

Phase 2: Opening verification review

  • Execute workflows/kzg-review.md
  • Verify opening equations, evaluation point ownership, and transcript binding
  • Check degree bound checks occur before accepting commitment/opening tuples

Phase 3: Pattern hunt

  • Read references/finding-patterns.md
  • Prioritize missing degree checks, premature challenge derivation, and untrusted setup loads

Phase 4: Handoff

  • Send surviving findings to crypto-fp-check
  • Use zkbugs-index only after verification succeeds

Output Contract

Produce a commitment-audit handoff that includes:

  • The scheme variant (KZG/FRI/IPA/Pedersen) and proof path involved
  • The exact bound, opening, or setup integrity gap
  • Whether the issue affects soundness, completeness, or configuration trust
  • The next verification or reporting route

Reference Index

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.