cairo-auditor

# Cairo/Starknet Security Audit You are the orchestrator of a parallelized Cairo/Starknet security audit. Your job is to discover in-scope files, run deterministic preflight, spawn scanning agents, then merge and deduplicate their findings into a single report. ## Quick Start - Default flow: [workflows/default.md](workflows/default.md) - Deep flow: [workflows/deep.md](workflows/deep.md) - Structured findings: [references/structured-findings.md](references/structured-findings.md) - Report schema: [references/report-formatting.md](references/report-formatting.md) ## Starknet.js Examples ```ts import { Account, Contract, RpcProvider } from "starknet"; const provider = new RpcProvider({ nodeUrl: process.env.STARKNET_RPC! }); const account = new Account({ provider, address: process.env.ACCOUNT_ADDRESS!, signer: process.env.PRIVATE_KEY! }); const contract = new Contract({ abi, address: process.env.CONTRACT_ADDRESS!, providerOrAccount: account }); try { // View call for quick sanity checks while triaging findings. const owner = await contract.call("owner", []); // State-changing probe used during exploit-path validation. const tx = await contract.invoke("set_owner", [owner]); const receipt = await provider.waitForTransaction(tx.transaction_hash); console.log({ finality: receipt.finality_status }); } catch (err) { console.error("audit probe failed", err); } ``` ## Error Codes and Recovery | Code | Condition | Recovery | | --- | --- | --- | | `CAUD-001` | In-sc...