Updated 1w ago
by pashov
skills
Pashov Audit Group Skills
1.3k GitHub stars (1,261)
+43 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | +2 |
| Oct 4 | +3 |
| Oct 5 | +1 |
| Oct 6 | +1 |
| Oct 7 | +6 |
| Oct 8 | +1 |
| Oct 9 | +2 |
| Oct 10 | +1 |
| Oct 11 | +1 |
| Oct 12 | 0 |
| Oct 13 | +1 |
| Oct 14 | +6 |
| Oct 15 | +12 |
| Oct 16 | +6 |
- 5 skills (5 skills found in its SKILL.md files)
- 236 forks (236 forks)
- 1w ago last update (Last updated 1w ago)
Install
Skills CLI
npx skills add pashov/skills
Asks which skills and agents to install. Just one: npx skills add pashov/skills --skill fizz — add -g for every project.
Claude Code
git clone https://github.com/pashov/skillscp -r "skills/fizz" ~/.claude/skills/
Copies the fizz skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add pashov/skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
fizz
Generate Echidna/Medusa-compatible Solidity fuzz suites from Foundry or Hardhat projects. Trigger on "fizz", "generate fuzz suite", "build fuzz harness", "stateful fuzzing", "fuzzing harness", "property testing", and "invariant suite".
fizz/SKILL.md on GitHub (opens in a new tab) -
solidity-auditor
Security audit of Solidity code while you develop. Trigger on "audit", "check this contract", "review for security", "loop mode", "run the auditor in loop mode", "run 3 passes". Modes - default (full repo) or a specific filename. Loop mode runs several passes in one scan, each pass told what the earlier ones found, and ends in one combined report; it remembers findings between scans in a ledger.
solidity-auditor/SKILL.md on GitHub (opens in a new tab) -
x-ray
Generates an x-ray.md pre-audit report covering overview, enhanced threat model (protocol-type profiling, git-weighted attack surfaces, temporal risk analysis, composability dependency mapping), invariants, integrations, docs quality, test analysis, and developer/git history. Triggers on 'x-ray', 'audit readiness', 'readiness report', 'pre-audit report', 'prep this protocol', 'protocol prep', 'su…
x-ray/SKILL.md on GitHub (opens in a new tab) -
fizz-convert
Convert English-language properties in PROPERTIES.md (produced by the Fizz skill) into Solidity assertions inside the existing fuzz harness, then flip their checkboxes. Trigger on "fizz-convert", "convert properties", "implement properties from PROPERTIES.md", "convert PROPERTIES.md to Solidity".
fizz/skills/fizz-convert/SKILL.md on GitHub (opens in a new tab) -
fizz-sync
Reconcile an existing Fizz harness with a changed source tree. Detects added/removed/changed contract functions, quarantines stale properties, regenerates drifted handler stubs, and refreshes the snapshot. Trigger on "fizz-sync", "resync fuzzing", "sync fuzz harness", "refresh fuzzing properties", "fuzzing drift check".
fizz/skills/fizz-sync/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.