known-good-comparison

Solid

When auditing a contract that resembles a canonical implementation (OpenZeppelin, Solady, Uniswap, Compound, etc.), compare against the reference. Treat deviations as suspect by default.

AI & Automation 38 stars 5 forks Updated 2 days ago MIT

Install

View on GitHub

Quality Score: 82/100

Stars 20%
53
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
100
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# Known-good comparison (meta-skill) Most production Solidity is forks of well-known references. The fastest path to high-precision audit is to know what "normal" looks like and treat deviations as suspect. ## Reference catalog The skill maintains awareness of canonical shapes: ### Tokens - OpenZeppelin ERC20, ERC721, ERC1155 (versions 4.x and 5.x) - Solady ERC20, ERC721, ERC1155, ERC4626 - ERC-2612 permit canonical - Permit2 Uniswap canonical ### Access / governance - OZ Ownable, Ownable2Step - OZ AccessControl, AccessControlEnumerable, AccessControlDefaultAdminRules - OZ Governor, GovernorVotes, GovernorTimelockControl - Compound Governor Bravo - OZ TimelockController ### Proxies / upgrades - OZ ERC1967, UUPS, TransparentUpgradeable - OZ BeaconProxy - Diamond standard EIP-2535 reference - Solady LibClone ### Math / utilities - OZ Math.mulDiv - Solady FixedPointMathLib - PRBMath UD60x18, SD59x18 ### AMMs / DEX - Uniswap V2 Pair, Router, Factory - Uniswap V3 Pool, NonfungiblePositionManager - Uniswap V4 PoolManager + hook templates - Curve StableSwap, CryptoSwap - Balancer V2, V3 vaults ### Lending - Aave V3 Pool, AToken, VariableDebtToken - Compound V3 Comet - Morpho Blue ### Vaults - OZ ERC4626 (v4.9+ for inflation defense) - Yearn V3 strategies - MetaMorpho ## How to use ### Step 1 — Detect reference If the contract: - Imports from `@openzeppelin/contracts` or `solady/` - Inherits from a recognizable parent - Implements a recognizable interface (`IERC20`, `IPo...

Details

Author
iktok90-design
Repository
iktok90-design/ai-smart-contract-auditor
Created
1 weeks ago
Last Updated
2 days ago
Language
JavaScript
License
MIT

Bundled in these plugins

auditsentry

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Listed

solidity-auditor

Solidity development standards and security auditing. TRIGGER when: working with .sol files, foundry.toml, hardhat.config.*, smart contract auditing, security review, or vulnerability analysis. Covers Foundry-first development patterns, vulnerability taxonomies, and audit methodology. DO NOT TRIGGER when: general Ethereum tooling/ecosystem questions (use ethskills skill), or Noir/ZK circuits (use noir skill).

0 Updated 2 weeks ago
DROOdotFOO
AI & Automation Listed

currency-and-audit-before-trust

Use when making a load-bearing or security-relevant claim, or reusing inherited or unfamiliar code — treat recalled facts and unread code as unverified until re-grounded against the live source, and disposition every dangerous surface rather than eyeballing it.

0 Updated 1 weeks ago
pedro-angel
AI & Automation Solid

token-compatibility

Detect ERC-20 token compatibility issues — fee-on-transfer, rebasing, non-standard return values, missing decimals(), low-decimal tokens, blacklistable tokens (USDC), pausable tokens. Activate on any ERC-20 integration, `transfer`/`transferFrom` use, balance-based accounting, decimal scaling.

38 Updated 2 days ago
iktok90-design