Vdf auditor

Skill Yue-Zhou1/zkcrypto-audit/plugins/protocol-auditors/skills/vdf-auditor

Audit VDF implementations for sequentiality assumptions, Wesolowski/Pietrzak verifier soundness, challenge derivation integrity, and modulus/group setup risks.From its SKILL.md

Install

npx -y skills add Yue-Zhou1/zkcrypto-audit --skill vdf-auditor

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

2.4 KB, 455 tokens by cl100k_base, as published. Nobody here has run it

vdf-auditor

Domain auditor for verifiable delay functions and sequential-proof verification.

When to Use

Auditing VDF setup, proving, and verification code paths
Reviewing Wesolowski or Pietrzak challenge and proof validation logic
Checking delay-parameter and repeated-squaring assumptions
Verifying modulus/group setup provenance and trusted assumptions

When NOT to Use

Generic signature or encryption audits without VDF sequentiality properties
Treating performance shortcuts as safe without verifier-soundness review
Marking a suspected VDF issue as confirmed without verification gates

Core Review Areas

Delay parameter selection and sequentiality assumptions
Challenge prime derivation and transcript completeness
Repeated-squaring and verifier exponent correctness
Trusted-modulus/group setup integrity and trapdoor assumptions
Proof batching rules and shortcut-path soundness

Workflow

Phase 1: Setup-to-verifier mapping

Read references/vdf-checklist.md
Execute workflows/challenge-review.md
Map setup, proof generation, and verifier code boundaries

Phase 2: Challenge and proof verification

Verify challenge derivation includes complete transcript context
Confirm verifier exponent and relation checks match the target construction
Validate delay-parameter handling cannot be bypassed by shortcut paths

Phase 3: Pattern hunt

Read references/finding-patterns.md
Prioritize malformed proof acceptance, transcript truncation, and modulus trust gaps

Phase 4: Handoff

Send surviving findings to crypto-fp-check
Use zkbugs-index only after the finding survives verification

Output Contract

Produce a VDF-specific handoff that includes:

The VDF construction and verifier routine involved
The challenge derivation inputs and sequentiality invariant at risk
Whether the issue is parameter, verifier, modulus/setup, or batching related
The next verification or reporting route

Reference Index

What ships with it: 4 files

3.3 KB alongside SKILL.md