Dkg threshold auditor

Skill Yue-Zhou1/zkcrypto-audit/plugins/protocol-auditors/skills/dkg-threshold-auditor

Audit DKG, threshold-signature, and FROST/MuSig-style code for rogue-key, nonce-binding, share-verification, and session-isolation failures. Use when reviewing key aggregation, VSS share checks, threshold reconstruction, or concurrent signing state.From its SKILL.md

Install

npx -y skills add Yue-Zhou1/zkcrypto-audit --skill dkg-threshold-auditor

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

2.4 KB, 435 tokens by cl100k_base, as published. Nobody here has run it

dkg-threshold-auditor

Domain auditor for distributed key generation and threshold signing flows.

When to Use

Auditing FROST, MuSig2, Feldman/Pedersen VSS, or custom threshold-signature code
Reviewing nonce derivation, share verification, and participant identity binding
Checking threshold reconstruction, interpolation, and abort-handling logic
Reviewing concurrent session handling in multi-party signing services

When NOT to Use

Reviewing standalone signature verification without threshold state
Building initial threat-model context for the full protocol
Declaring a suspected threshold bug confirmed without verification

Core Review Areas

Key aggregation and participant binding
Nonce derivation and session isolation
VSS share validation and reconstruction
Abort behavior and leakage paths

Workflow

Phase 1: Share and participant validation

Read references/dkg-checklist.md
Verify participant identifiers, key-aggregation commitments, and share bindings before any signing or reconstruction path

Phase 2: Pattern hunt

Read references/finding-patterns.md
Treat nonce reuse, shared mutable session state, and retry logic as critical-path audit targets

Phase 3: Session review

Execute workflows/session-review.md
Check message binding, aggregate public key binding, public polynomial commitments, and interpolation edge cases together

Phase 4: Handoff

Send surviving findings to crypto-fp-check
Use zkbugs-index only after the finding survives verification

Output Contract

Produce a threshold-protocol handoff that includes:

The affected session, participant identifiers, nonces, shares, or commitments
The exact binding, verification, or interpolation failure candidate
Whether the issue is single-session, concurrent-session, or abort-path related
The next verification or reporting route

Reference Index

What ships with it: 4 files

4.0 KB alongside SKILL.md