Try cairo-auditor
Use the deterministic demo fixture first.
Use cairo-auditor in deep mode on skills/cairo-auditor/tests/fixtures/insecure_upgrade_controller/src/lib.cairo --file-output.
Output only the final report.███████╗████████╗ █████╗ ██████╗ ██╗ ██╗███████╗██╗ ██╗██╗██╗ ██╗ ███████╗ ██╔════╝╚══██╔══╝██╔══██╗██╔══██╗██║ ██╔╝██╔════╝██║ ██╔╝██║██║ ██║ ██╔════╝ ███████╗ ██║ ███████║██████╔╝█████╔╝ ███████╗█████╔╝ ██║██║ ██║ ███████╗ ╚════██║ ██║ ██╔══██║██╔══██╗██╔═██╗ ╚════██║██╔═██╗ ██║██║ ██║ ╚════██║ ███████║ ██║ ██║ ██║██║ ██║██║ ██╗███████║██║ ██╗██║███████╗███████╗███████║ ╚══════╝ ╚═╝ ╚═╝ ╚═╝╚═╝ ╚═╝╚═╝ ╚═╝╚══════╝╚═╝ ╚═╝╚═╝╚══════╝╚══════╝╚══════╝
Plain markdown skills and direct links. Start with cairo-auditor for Cairo security review.
Use the deterministic demo fixture first.
Use cairo-auditor in deep mode on skills/cairo-auditor/tests/fixtures/insecure_upgrade_controller/src/lib.cairo --file-output.
Output only the final report.Start here
LLMs miss Starknet-specific upgrade paths, dispatcher failures, and Cairo component edge cases. Start with cairo-auditor if you want the clearest first impression.
discover -> preflight -> bundle -> spawn(4+1) -> merge -> report
files rules partitions agents dedup findingsQuickstart
npm install -g skill-installer
skill-installer install https://github.com/keep-starknet-strange/starknet-agentic/tree/main/skills/cairo-auditorUse cairo-auditor in deep mode on skills/cairo-auditor/tests/fixtures/insecure_upgrade_controller/src/lib.cairo --file-output.
Output only the final report.`security-review-*.md` plus `Execution Integrity: FULL` when the deep run completes cleanly.
/plugin marketplace add keep-starknet-strange/starknet-agentic
/plugin install starknet-agentic-skills@starknet-agentic-skills --scope user
/reload-plugins/starknet-agentic-skills:cairo-auditor deep skills/cairo-auditor/tests/fixtures/insecure_upgrade_controller/src/lib.cairo --file-output`security-review-*.md` plus a final markdown report in-session for the demo fixture.
npx skills add keep-starknet-strange/starknet-agentic/skills/cairo-auditorPrompt your host: audit skills/cairo-auditor/tests/fixtures/insecure_upgrade_controller/src/lib.cairo with cairo-auditor and output only the final report.Markdown findings in your host output; use Codex or Claude if you want the most predictable deep-run verification flow.
Codex and Claude Code are the clearest first-run paths. Use the deterministic demo fixture before you point the skill at your own code.
Preview
Expect one markdown report: signal summary, execution trace, prioritized findings, fix diffs, and required tests.
Skills
Use Production Ready for high-stakes audits. Public Beta is recommended for active development workflows.
Security-critical skill with hardened workflows and benchmark-backed quality tracking.
Security audit of Cairo/Starknet code. Trigger on "audit", "check this contract", "review for security". Modes - defaul…
Recommended for real use, but still evolving quickly with active updates and tighter feedback loops.
Cairo smart-contract authoring on Starknet. Trigger on "write a contract", "create a contract", "implement this in Cair…
Cairo smart-contract testing with snforge. Trigger on "write tests", "add unit tests", "fuzz test", "integration test",…
Deployment guidance for Cairo contracts on Starknet covering sncast commands, account setup, declare/deploy workflow, n…
Improves Cairo performance after correctness is established. Trigger on "optimize", "gas usage", "reduce steps", "profi…
Useful patterns, but behavior and guidance can change significantly between releases.
Create and manage Starknet wallets for AI agents. Transfer tokens, check balances, manage session keys, deploy accounts…
Execute DeFi operations on Starknet including token swaps via avnu aggregator, DCA recurring buys, STRK staking, and le…
Register AI agents on-chain using the ERC-8004 Trustless Agents standard. Manage agent identity as NFTs, build reputati…
Simple P2P payments on Starknet. Generate QR codes, payment links, invoices, and transfer ETH/STRK/USDC. Like Lightning…
Create an anonymous Starknet wallet via Typhoon and interact with Starknet contracts. Privacy-focused wallet creation f…
Reference for integrating or maintaining applications built with keep-starknet-strange/starkzap, including StarkSDK set…
Bridge to Starknet from any EVM chain and register with Huginn agent registry. Enables cross-chain agent onboarding wit…
Guidance for installing and operating the Cartridge Controller CLI (controller) to create human-approved sessions and e…
Starknet account abstraction correctness and security guidance for validate/execute paths, nonces, signatures, and sess…
Starknet network-level constraints and protocol facts that impact contract safety and agent reasoning.
Reference for building Starknet applications using starknet.js v9.x SDK, including contract interaction, account manage…
Confidential ERC20 payments on Starknet using Tongo protocol. Fund, transfer, withdraw, and rollover encrypted token ba…