No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by solanabr · Claude Skill · ★ 60
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is auditor-skill safe to install? View the security audit →
auditor-skill — Open-Source AI Security Audit Skill Production-grade security audit for any codebase, powered by AI agents. 20 checklists · 1,346 verification items · 131 known attack vectors · executable PoCs + fix patches A full audit-firm lifecycle (automated + interactive) · Benchmarked against CertiK, SOC 2, OWASP Top 10:2025 Verify COSTS.md as a referecence - Running this audit can burn a lot of credits. What Is This? auditor-skill is a skill file (a structured prompt + checklists) that turns any LLM agent (Copilot, Cursor, Windsurf, Claude Code, Codex, etc.) into a professional-grade security auditor. It reads your code file by file, checks 1,346 items across 20 security domains, tests against 131 real-world attack vectors, and produces a structured report with severity scores. It is not a SaaS product. It's a folder of markdown files you clone into your repo or give to an AI agent. Adaptation required before use. This skill was originally developed for a specific Solana/Anchor DeFi project and then generalized. Before running it on your project you must update with your actual folder structure, file names, and state variable names.
| Stars | 60 |
| Forks | 13 |
| Language | Rust |
| Category | Claude Skill |
| License | MIT |
| Quality Score | 71.7383296305914/100 |
| Last Updated | 2026-09-29 |
| Created | 2026-05-11 |
| Platforms | browser, claude-code, rust |
| Est. Tokens | ~27k |
These tools work well together with auditor-skill for enhanced workflows:
Looking for a auditor-skill alternative? If you're comparing auditor-skill with other claude skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Offline security scanner for AI-agent repos, skills, plugins, and MCP servers.
AI-powered security assessment SKILLS for your codebase. Multi-language (JS, Go, Python, Rust, Java, PHP, Ruby
Autonomous Web3 security audit agent for Claude Code
Professional WordPress engineering skills for Claude Code - performance optimization, security auditing, Guten
Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mappe
Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers,
Explore other popular claude skill tools:
auditor-skill is Claude Code / agentic security skill for Solana programs and software. Full audit-firm lifecycle, executable PoC + fix-patch delivery, a Rust pre-scanner + cross-audit memory, 1,346 checks across 20 c. It is categorized as a Claude Skill with 60 GitHub stars.
auditor-skill is primarily written in Rust. It covers topics such as anchor-lang, audit-skill, claude-skills.
You can find installation instructions and usage details in the auditor-skill GitHub repository at github.com/solanabr/auditor-skill. The project has 60 stars and 13 forks, indicating an active community.
auditor-skill is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to auditor-skill on Agent Skills Hub include repo-forensics, perseus, plamen. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: