Can it fix security vulnerabilities automatically?

It identifies issues using static analysis and helps you triage them; while it can suggest fixes, it focuses on ensuring you have a clean, documented baseline for human auditors.

Does this skill support smart contract languages?

Yes, it has specialized support for Solidity (using Slither) and Rust (using Dylint), making it ideal for Web3 and blockchain security prep.

When should I use the Audit Prep Assistant?

It is recommended to start using this skill 1 to 2 weeks before your scheduled security audit to ensure all low-hanging fruit is resolved and documentation is complete.

What documentation does it help create?

The skill helps generate flowcharts, sequence diagrams, user stories, actor/privilege maps, and a domain-specific glossary of terms.

Audit Prep Assistant

Name: Audit Prep Assistant
Author: fjor1025

byfjor1025

0•

Security & Testing

Prepares codebases for professional security reviews by automating static analysis, test coverage checks, and architectural documentation based on industry-standard checklists.

The Audit Prep Assistant helps developers streamline the preparation phase of a security review using the Trail of Bits checklist. It guides users through a multi-step process to define security goals, execute static analysis across multiple languages (Solidity, Rust, Go), and clean up the codebase by removing dead code. Beyond just technical checks, it automates the creation of essential audit artifacts like flowcharts, user stories, and actor privilege maps, ensuring that security researchers can focus on complex vulnerabilities rather than surface-level issues or missing documentation.

Key Features

01Multi-language static analysis integration (Slither, Dylint, golangci-lint, Semgrep)

02Generation of architectural diagrams, flowcharts, and sequence maps

03Automated test coverage analysis and gap identification

040 GitHub stars

05Dead code and unused dependency detection for cleaner reviews

06Standardized 'Audit Prep Package' creation with build instructions and frozen scope

Use Cases

01Finalizing a smart contract project for an external audit by a security firm

02Onboarding new developers by generating clear architecture and workflow documentation

03Performing a comprehensive internal security sanity check before a mainnet launch

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fjor1025/infosec-framework audit-prep-assistant

For use in Claude.ai and ChatGPT

Key Features

01Multi-language static analysis integration (Slither, Dylint, golangci-lint, Semgrep)

02Generation of architectural diagrams, flowcharts, and sequence maps

03Automated test coverage analysis and gap identification

040 GitHub stars

05Dead code and unused dependency detection for cleaner reviews

06Standardized 'Audit Prep Package' creation with build instructions and frozen scope

Use Cases

01Finalizing a smart contract project for an external audit by a security firm

02Onboarding new developers by generating clear architecture and workflow documentation

03Performing a comprehensive internal security sanity check before a mainnet launch

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fjor1025/infosec-framework audit-prep-assistant

For use in Claude.ai and ChatGPT