agentsclimarketplace
Sign in

Zk circuit auditor

Skill Yue-Zhou1/zkcrypto-audit/plugins/zk-and-vm-auditors/skills/zk-circuit-auditor

Audit ZK circuits, proof systems, and verifier code for soundness and transcript failures. Use when reviewing witness constraints, Fiat-Shamir flows, KZG/PCS setup assumptions, public input encoding, or recursive proof threading.From its SKILL.md

Install
npx -y skills add Yue-Zhou1/zkcrypto-audit --skill zk-circuit-auditor

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

3.7 KB, 795 tokens by cl100k_base, as published. Nobody here has run it

zk-circuit-auditor

Domain auditor for circuit soundness and verifier logic.

When to Use

  • Auditing Circom, Noir, Halo2, Groth16, PLONKish, or custom ZK proof code
  • Reviewing witness assignment, constraint completeness, and public input handling
  • Checking Fiat-Shamir transcript construction and challenge timing
  • Reviewing verifier equations, KZG/SRS assumptions, or recursive proof plumbing
  • Auditing generic STARK/AIR systems outside Cairo/Starknet: AIR transition and boundary constraints, trace padding, composition polynomials, FRI query schedules, and DEEP out-of-domain sampling

When NOT to Use

  • Building the initial threat model for an unfamiliar cryptographic codebase
  • Verifying whether a suspected finding is report-ready
  • Checking prior-art or disclosure state

Core Review Areas

  1. Constraint soundness and witness binding
  2. Transcript completeness and ordering
  3. Verifier equation and public input consistency
  4. Setup, batching, and recursion assumptions

Workflow

Phase 1: Constraint and witness review

  • Read references/zk-checklist.md
  • If the codebase uses circom, halo2, arkworks, or plonky2/3, read the corresponding library pattern file in references/ before proceeding
  • If the target is a STARK/AIR system (AIR constraints, execution trace, composition polynomial, FRI), read references/stark-air-patterns.md and execute workflows/stark-air-review.md; Cairo/Starknet language and hint review routes to cairo-auditor, and standalone FRI-as-PCS review routes to commitment-scheme-auditor
  • Map every assigned witness value to its constraining equations
  • Flag unconstrained signals, non-native arithmetic width gaps, and lookup multiplicity edge cases

Phase 2: Transcript review

  • Read references/finding-patterns.md
  • Execute workflows/transcript-review.md
  • Treat any missing absorb, context-binding field, or early challenge as a soundness candidate until disproven

Phase 3: Setup and verifier review

  • Execute workflows/setup-review.md
  • Verify the exact verifier equation, setup provenance, opening-point ownership, and recursion threading

Phase 4: Handoff

  • Send surviving findings to crypto-fp-check
  • Use zkbugs-index only after the claim survives verification

Output Contract

Produce a circuit-audit handoff that includes:

  • The affected constraints, transcript steps, verifier equations, or setup assumptions
  • The exact witness/public-input or proof path involved
  • For STARK/AIR targets: the AIR constraint group, trace segment, composition/quotient step, or FRI parameter at issue
  • Whether the issue is a soundness, privacy, or batching candidate
  • The next verification or reporting route

Reference Index

What ships with it: 12 files

22.0 KB alongside SKILL.md

agents/

references/

workflows/

Keep looking

Skills are one crate of 326,852. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.