Is the Auditor Skill skill free?

Yes. The skill itself is free from solanabr/auditor-skill. SkillProof publishes the install command and an independent test verdict at no cost.

What is the Auditor Skill SkillProof Score?

8.4/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 7/10, docs & honesty 4/5.

How do I install Auditor Skill?

Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.

Can I use Auditor Skill with Cursor, Copilot, Gemini CLI, Codex or other AI tools?

The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.

Auditor Skill

Solana/Anchor + multi-language security auditor with 1,346 checklist items

by solanabr · solanabr/auditor-skill

Tested · Works

Install — copy the command Download source ↗

Test report

Verdict: Tested · Works
Score: 8.4/10
Tested: Jul 17, 2026
Environment: Claude Code 2.x (agent harness)
Upstream re-checked: Aug 10, 2026 · 79744ad

Audited a planted vulnerable Anchor withdraw handler with and without the skill: both runs caught the permissionless-drain (AccountInfo authority, no Signer type), but the checklist walk additionally surfaced the fake '/// CHECK' comment on an unvalidated destination account (AV-003/004) and the missing has_one authority linkage (AC-003/006) that the freeform baseline glossed, each tagged with a numeric 1-10 severity and item ID. The checklists are real and detailed (1,346 items across 20 files), though the 'benchmarked against CertiK/EY' banner claim is unverifiable marketing. Scanned install.sh and bundled scripts (report-to-pdf.sh, commit-msg hook): no exfil, no covert instructions, clean.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

Installs cleanly 5/5
Triggers reliably 5/5
Output vs. baseline 7/10
Docs & honesty 4/5

What Auditor Skill does

A scope-gated security audit skill that discovers a repo, loads only the relevant checklists, and emits a verdict for every in-scope item using a 1-10 severity scale. Primarily an on-chain Solana/Anchor auditor (missing signers, unchecked accounts, arithmetic overflow, CPI/PDA confusion) but also covers TypeScript, Python, Go, Java, and general code security. Triggers on smart-contract audits and full-stack security reviews; explicitly not for writing features or non-security code.

How to install Auditor Skill

git clone https://github.com/solanabr/auditor-skill
mkdir -p ~/.claude/skills
cp -r auditor-skill ~/.claude/skills/auditor-skill

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger Auditor Skill

/auditor-skill Solana/Anchor + multi-language security auditor with 1,346 checklist items

It also activates on plain-language prompts like these:

audit this Anchor program for missing signer checks
run a security review on my Solana contract before I deploy it
check my Rust program for overflow and CPI or PDA confusion bugs

Frequently asked questions

Is the Auditor Skill skill free?: Yes. The skill itself is free from solanabr/auditor-skill. SkillProof publishes the install command and an independent test verdict at no cost.
Does Auditor Skill work with Claude Code?: We tested it with Claude Code 2.x (agent harness) on Jul 17, 2026. Verdict: Tested · Works. Audited a planted vulnerable Anchor withdraw handler with and without the skill: both runs caught the permissionless-drain (AccountInfo authority, no Signer type), but the checklist walk additionally surfaced the fake '/// CHECK' comment on an unvalidated destination account (AV-003/004) and the missing has_one authority linkage (AC-003/006) that the freeform baseline glossed, each tagged with a numeric 1-10 severity and item ID. The checklists are real and detailed (1,346 items across 20 files), though the 'benchmarked against CertiK/EY' banner claim is unverifiable marketing. Scanned install.sh and bundled scripts (report-to-pdf.sh, commit-msg hook): no exfil, no covert instructions, clean.
What is the Auditor Skill SkillProof Score?: 8.4/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 7/10, docs & honesty 4/5.
How do I install Auditor Skill?: Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use Auditor Skill with Cursor, Copilot, Gemini CLI, Codex or other AI tools?: The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.