audit
Compare original and translation side by side
🇺🇸
Original
English🇨🇳
Translation
ChineseEVM Smart Contract Audit
EVM智能合约审计
A full audit system for any EVM contract. Runs parallel specialist agents against domain-specific checklists, synthesizes findings, and files GitHub issues.
面向任意EVM合约的完整审计系统。运行并行专业Agent对照特定领域检查清单执行审计，综合审计结果，并提交GitHub issue。
The Checklists
检查清单
20 specialized skills covering every major vulnerability domain. Fetch the master index first:
https://raw.githubusercontent.com/austintgriffith/evm-audit-skills/main/evm-audit-master/SKILL.mdThe master index contains:
- Full routing table (which skills to load for which contract types)
- The complete audit methodology (recon → parallel agents → synthesis → issues)
- Standard finding format with severity definitions
All 20 skill checklists are at:
https://raw.githubusercontent.com/austintgriffith/evm-audit-skills/main/<skill-name>/references/checklist.md覆盖所有主流漏洞领域的20项专业技能。请先获取主索引：
https://raw.githubusercontent.com/austintgriffith/evm-audit-skills/main/evm-audit-master/SKILL.md主索引包含：
- 完整路由表（不同合约类型对应加载的技能清单）
- 完整审计方法论（侦查 → 并行Agent执行 → 结果综合 → 问题提交）
- 带严重程度定义的标准结果输出格式
所有20项技能检查清单的地址格式为：
https://raw.githubusercontent.com/austintgriffith/evm-audit-skills/main/<skill-name>/references/checklist.mdSkills Available
可用技能
| Skill | When to Load |
|---|---|
| Always |
| Always |
| Contract interacts with ERC20 tokens |
| AMM, DEX, Uniswap V3/V4, liquidity pools |
| Lending, borrowing, CDP, liquidations |
| Staking, liquid staking, restaking, EigenLayer |
| Vaults, share/asset conversion |
| Account abstraction, paymasters, session keys |
| Cross-chain, LayerZero, CCIP, Wormhole |
| Upgradeable contracts, UUPS, Transparent, Diamond |
| Off-chain signatures, EIP-712, permits |
| DAO voting, timelocks, multi-sig |
| Chainlink, TWAP, Pyth, price feeds |
| Inline assembly, Yul, CREATE2 |
| Non-mainnet: Arbitrum, OP, zkSync, Blast, BSC |
| Flash loan attack vectors |
| NFTs, ERC721, ERC1155 |
| DoS, unbounded loops, gas griefing |
| Ownership, roles, centralization risks |
| 技能 | 加载时机 |
|---|---|
| 始终加载 |
| 始终加载 |
| 合约与ERC20代币交互的场景 |
| AMM、DEX、Uniswap V3/V4、流动性池相关场景 |
| 借贷、CDP、清算相关场景 |
| 质押、流动性质押、再质押、EigenLayer相关场景 |
| 金库、份额/资产转换相关场景 |
| 账户抽象、付费方、会话密钥相关场景 |
| 跨链、LayerZero、CCIP、Wormhole相关场景 |
| 可升级合约、UUPS、透明代理、钻石代理相关场景 |
| 链下签名、EIP-712、permit相关场景 |
| DAO投票、时间锁、多签相关场景 |
| Chainlink、TWAP、Pyth、价格喂送相关场景 |
| 内联汇编、Yul、CREATE2相关场景 |
| 非主网场景：Arbitrum、OP、zkSync、Blast、BSC |
| 闪电贷攻击向量相关场景 |
| NFT、ERC721、ERC1155相关场景 |
| DoS、无边界循环、gas消耗攻击相关场景 |
| 所有权、角色、中心化风险相关场景 |
How To Run An Audit
如何执行审计
- Fetch the master skill (link above) — it has the full pipeline
- Read the contract(s)
- Select 5-8 skills using the routing table
- Spawn one opus sub-agent per skill (parallel)
- Each agent walks its checklist and writes
findings-<skill>.md - Synthesize all findings into
AUDIT-REPORT.md - File GitHub issues for Medium severity and above
- 获取主技能（链接如上）——它包含完整流程
- 读取合约代码
- 参照路由表选择5-8项技能
- 为每项技能生成一个opus子Agent（并行执行）
- 每个Agent对照其检查清单执行审计，输出文件
findings-<skill>.md - 将所有审计结果综合到文件中
AUDIT-REPORT.md - 为中等及以上严重级别的问题提交GitHub issue
Invocation
调用示例
Audit this contract and file issues: https://github.com/owner/repo/blob/main/contracts/Foo.sol
Checklists: https://raw.githubusercontent.com/austintgriffith/evm-audit-skills/main/evm-audit-master/SKILL.mdAudit this contract and file issues: https://github.com/owner/repo/blob/main/contracts/Foo.sol
Checklists: https://raw.githubusercontent.com/austintgriffith/evm-audit-skills/main/evm-audit-master/SKILL.mdSources
来源
Built from research by Dacian, beirao.xyz, Sigma Prime, RareSkills, Decurity, weird-erc20, Spearbit, Hacken, OpenZeppelin, Cyfrin, and more.
Full attribution: https://github.com/austintgriffith/evm-audit-skills#attribution--thanks
基于Dacian、beirao.xyz、Sigma Prime、RareSkills、Decurity、weird-erc20、Spearbit、Hacken、OpenZeppelin、Cyfrin等机构/个人的研究构建。
完整致谢：https://github.com/austintgriffith/evm-audit-skills#attribution--thanks