CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

contract-auditor-specialist-methods

Evidence-led contract auditor technical methods and evidence interpretation for the relevant environment.

Quality

62%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/standard/contracts/specialist-methods/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

80%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is an exemplar of token-efficient expert guidance: terse, non-obvious, and free of padding, with concrete checklists for EVM, oracle, and upgrade analysis. Its main weakness is that the verification flow (scanner finding → manual confirmation → harness reproduction) is implied rather than sequenced with explicit checkpoints. Guidance on deferring implementation detail to other technique skills is explicit and deliberate.

Suggestions

Make the implicit verification flow explicit, e.g., a short sequence: 'pattern candidate → confirm caller/modifier/storage state → Foundry harness against pinned fork → report with preserved flags and inputs.'

Add a brief validation checkpoint per analysis area (e.g., 'do not cite impact without a reproduced harness or an explicit assumption list') so evidentiary limits become gates rather than cautions.

Name the specific technique/contracts skills being deferred to (or their paths) so the handoff is unambiguous.

DimensionReasoningScore

Conciseness

The body is dense, expert-level, and free of padding — it never explains basics (what Slither is, what a proxy does) and every sentence adds non-obvious guidance, e.g., 'The legacy slither_ingest backend is separate from the engagement KG; neither scanner ingestion nor a graph edge proves exploitability.' This matches 'Lean and efficient; assumes Claude's competence; every token earns its place.'

5 / 5

Actionability

For an instruction-only skill the guidance is concrete: exact oracle checklist items ('price source, decimal handling, update cadence, liquidity, TWAP window and consumers') and precise harness requirements ('preserve compiler flags, fork block and test inputs'). It is not a 5 because there are no copy-paste commands or example harnesses, and not a 3 because the checklists are specific and executable in substance rather than pseudocode-like hints.

4 / 5

Workflow Clarity

An implicit verify-then-claim sequence exists (pattern candidate → confirm caller/modifier/state → Foundry harness → evidence), but it is never laid out as explicit steps with checkpoints, matching 'sequence present but checkpoints missing or implicit.' It is not a 4 because no ordered procedure or validation gate is stated; the skill itself notes it deliberately does not define an engagement stage order.

3 / 5

Progressive Disclosure

The body is under 50 lines with well-organized sections and no need for external references — no references/, scripts/, or assets/ directories exist, and pointers to other technique skills are clearly signaled in prose. This matches the rubric's simple-skill case: 'under 50 lines with no need for external references... score 5 with just well-organized sections.'

5 / 5

Total

17

/

20

Passed

Description

28%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description identifies its niche (contract auditing) but relies on abstract internal vocabulary instead of concrete capabilities, and provides no 'when to use' trigger guidance. As a routing signal it would rarely fire on a user's natural phrasing. It needs concrete actions and an explicit 'Use when...' clause.

Suggestions

Add an explicit 'Use when...' clause listing concrete triggers, e.g., 'Use when auditing smart contracts, verifying scanner findings, or building PoC harnesses for suspected vulnerabilities.'

Replace abstract labels ('Evidence-led technical methods') with concrete actions drawn from the body, e.g., 'Confirm Slither/solidity_scan pattern candidates, build Foundry harnesses against pinned chain state, review oracle and proxy-upgrade trust boundaries.'

Include natural user vocabulary such as 'smart contract audit', 'Solidity', 'DeFi', 'reentrancy', and 'exploitability' so the skill triggers on real-world phrasing.

DimensionReasoningScore

Specificity

The description names the domain ('contract auditor technical methods and evidence interpretation') but offers no concrete actions — phrases like 'Evidence-led' and 'technical methods' are generic labels rather than things the skill does, matching 'Names the domain but actions are minimal or generic'. It is not a 3 because no 1-2 concrete actions (e.g., running static analysis, building exploit harnesses, reviewing upgrade safety) are ever stated.

2 / 5

Completeness

There is a vague 'what' ('technical methods and evidence interpretation') and no 'when' clause at all, matching 'Has a vague what and no when'; the missing 'Use when...' guidance also caps this dimension at 3 per the judging guidelines. It is not a 1 because the domain-side 'what' is at least stated, however abstractly.

2 / 5

Trigger Term Quality

Only 'contract auditor' functions as a plausible user phrase; the rest is internal jargon ('Evidence-led', 'evidence interpretation for the relevant environment'), missing natural terms users would say like 'smart contract audit', 'Solidity', 'DeFi', or 'audit findings'. It is not a 3 because natural variations and synonyms are entirely absent, not merely incomplete.

2 / 5

Distinctiveness Conflict Risk

'Contract auditor' carves out a recognizable niche distinct from general code review, but the vague tail ('technical methods and evidence interpretation for the relevant environment') could overlap with other audit/investigation skills, matching 'Somewhat specific but could still overlap with similar skills'. It is not a 4 because no distinct trigger phrases sharpen the boundary.

3 / 5

Total

9

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

metadata_field

'metadata' should map string keys to string values

Warning

Total

14

/

16

Passed

Repository

PurpleAILAB/Decepticon

Path

packages/decepticon/decepticon/skills/standard/contracts/specialist-methods/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.