trailofbits/skills✦ 精选0°

audit-prep-assistant

仓库创建 2026年1月15日最近提交 6 天前SkillHot 收录 20 天前

⬈ GitHub 仓库 ⬈ SKILL.md 原文件 ⬇ Raw 原始文件

▸ 精选理由

让代码在审计前达到更高可审查性和质量。

▸ 风险提示

可能需运行外部工具并上传代码，存在数据泄露风险。

这个 Skill 做什么

按审计清单准备代码库：静态分析、增测、删冗与生成文档。

按 Trail of Bits 的审计清单把代码库收拾到能顺利过审的状态：跑 static analysis、补测覆盖、删掉 dead code、补齐文档与流程图。建议在正式审计前一两周开始用来设定审计目标并自动化常见修整工作。特别之处是把繁琐清单拆成可执行任务，能让审计更高效、更省钱。

▸ 展开 SKILL.md 英文原文

Prepares codebases for security review using Trail of Bits' checklist. Helps set review goals, runs static analysis tools, increases test coverage, removes dead code, ensures accessibility, and generates documentation (flowcharts, user stories, inline comments).

开发编程审计准备静态分析测试覆盖通用

6.3k

Stars

542

Forks

仓库内 Skill

+270

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/trailofbits/skills/main/plugins/building-secure-contracts/skills/audit-prep-assistant/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/trailofbits/skills/main/plugins/building-secure-contracts/skills/audit-prep-assistant/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# Audit Prep Assistant

## Purpose

Helps prepare for a security review using Trail of Bits' checklist. A well-prepared codebase makes the review process smoother and more effective.

**Use this**: 1-2 weeks before your security audit

---

## The Preparation Process

### Step 1: Set Review Goals

Helps define what you want from the review:

**Key Questions**:
- What's the overall security level you're aiming for?
- What areas concern you most?
  - Previous audit issues?
  - Complex components?
  - Fragile parts?
- What's the worst-case scenario for your project?

Documents goals to share with the assessment team.

---

### Step 2: Resolve Easy Issues

Runs static analysis and helps fix low-

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有