# pashov/skills

> A set of AI skills for Solidity smart contract security auditing: generating Echidna/Medusa fuzz suites, finding vulnerabilities, and running a pre-audit scan with threat modeling. Aimed at smart contract developers and auditors.

- Magnitude: 1.4 out of 10 — Steady
- Stars: 1,203 total · +4 stars today, ≈ 7 by evening
- Star trust: star growth looks organic
- Category: Security · Language: JavaScript · License: MIT · Created: 2026-02-23 · Last push: 2026-09-23
- GitHub: https://github.com/pashov/skills · Page: https://gitnova.dev/en/r/pashov/skills

## Useful for

- Generate an Echidna/Medusa fuzz suite for a Foundry or Hardhat project
- Run an AI security audit of Solidity contracts for critical vulnerabilities
- Perform a pre-audit scan with threat model and invariants

## Why it’s here

- 4 stars so far today, about 7 expected by the end of the day.
- GitHub Trending JavaScript today: #9, +8 stars.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 219
- Issues and pull requests: 48
- Watchers: 20
- Average over the last week: 7 per day
- Usual pace: 2 per day
- Stars in the last hour (measured): 1
- Latest release: v23092026 (2026-09-23)

## Stars per day, last 30 days (oldest → newest, today is partial)

2026-08-27 … 2026-09-25: 2, 4, 0, 1, 2, 8, 3, 3, 2, 1, 1, 17, 2, 0, 1, 1, 0, 2, 1, 0, 7, 1, 1, 0, 1, 6, 16, 12, 7, 4

## Spotted in now

- GitHub Trending JavaScript today: #9, +8 stars

## Similar by description

1. **anthropics/defending-code-reference-harness** — 1.1 · Steady · Security · Python · +2 stars today, ≈ 4 by evening
   A reference implementation for autonomous vulnerability discovery and remediation in source code using Claude: skills for threat modeling, scanning, triage, and patching, plus a pipeline with gVisor sandboxing.
   Full card: https://gitnova.dev/en/r/anthropics/defending-code-reference-harness.md
2. **cloudflare/security-audit-skill** — 3.5 · Cooling · Security · JavaScript · +117 stars today, ≈ 218 by evening
   A coding-agent skill that turns the agent into a security auditor, running a multi-phase code audit with independently verified, machine-readable findings.
   Full card: https://gitnova.dev/en/r/cloudflare/security-audit-skill.md

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-09-25 14:45 UTC, updated every 30 minutes.