Pashov Audit Skills
pashov-skills
Pashov Audit Group skills for auditing Solidity smart contracts: a codebase overview, an auditor role and fuzzing. They do not replace an independent audit
- 1,290 ★ on the repository
- Last commit
- MIT
Extended access
Why this level
- Runs fuzzing and analysis in your environment
- Does not replace an independent audit
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add skills/pashov-skillsDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- Runs fuzzing and analysis in your environment
- Does not replace an independent audit
This is third-party code. Review the repository files before installing.
What it does
pashov/skills are Pashov Audit Group skills for auditing Solidity smart contracts: a codebase overview, an auditor role and fuzzing. Installation is described in the README as asking the agent to install the repository and run the needed skill, with no separate npx command: see the README. Version v05102026 from 05.10.2026, MIT license. It is a tool for an auditor and developer and not an independent audit.
Who it is for. For smart contract developers and auditors who want to pre-check code for vulnerabilities with an agent.
Good fit when
- You need a pre-check of Solidity contracts before an audit
- You need a codebase overview and an auditor role in an agent
- You need contract fuzzing from an agent
Not a fit when
- You need an independent audit: the skills do not replace it
- You need a tool for a language other than Solidity
Example request
Check the vault contract for typical vulnerabilities and describe the findings with line numbersLimitations
The skills run fuzzing and analysis in your environment, so access is extended. The result does not replace an independent audit: check what was found and not found yourself. Use the skills only on your own code or with the owner's permission.
How to disable. Remove the skill from the agent's folder or the plugin through the plugin manager.
FAQ
What is in the set?
Skills for auditing Solidity smart contracts: a codebase overview, an auditor role, fuzzing.
Does it replace an audit?
No, it is a tool for an auditor and developer and not an independent audit.
How do I install it?
The procedure is in the README: by asking the agent to install the repository, with no npx command.
Discussion
No questions or reviews yet.
Related
SkillsA code security audit skill by Cloudflare: the agent runs recon, coverage-led hunting and independent verification of findings, then produces a structured repor
A security scanner for agent skills: finds prompt injection, data exfiltration and malicious code before you install
Security and 152-FZ audit skill with rouble risk pricing
axioma-security
A skill for a deep website security and 152-FZ compliance audit: every finding is mapped to a law article and priced in roubles
Security audit skill with GOST and FSTEC
Security Audit Skill for Claude Code
A security audit skill for Claude Code: OWASP Top 10 plus GOST R 56939, FSTEC Order No. 21 and 152-FZ, parallel subagents and a compliance matrix
Trail of Bits skills
Trail of Bits Skills Marketplace
Trail of Bits plugin marketplace for security work: smart contracts, C/C++ and Rust review, Semgrep, CodeQL and fuzzing
VibeSec
VibeSec-Skill
A secure coding skill: the agent looks at code from a bug hunter's perspective and prevents common web vulnerabilities
README in short
The README describes Pashov Audit Group skills for auditing Solidity smart contracts with a codebase overview and fuzzing. MIT license.