Can it review multiple contracts at once?

Yes, you can provide a directory path, and the skill will recursively find and review all relevant main.nr files within the source folders.

How does it stay updated with the latest Aztec version?

The skill includes a sync workflow that detects your project's Nargo.toml version and updates the MCP server context for accurate pattern matching.

Does it catch double-spending vulnerabilities?

Yes, it specifically checks for proper nullifier handling and ownership checks to ensure private notes cannot be unauthorized or double-spent.

What types of contracts can this skill review?

It specifically reviews Aztec smart contracts written in the Noir language, focusing on private/public state interactions and ZK-specific logic.

Aztec Smart Contract Auditor

Name: Aztec Smart Contract Auditor
Author: critesjosh

bycritesjosh

•

Security & Testing

Reviews Aztec Noir smart contracts for security vulnerabilities, architectural best practices, and API correctness.

About

This skill provides a comprehensive auditing framework for Noir smart contracts on the Aztec Network, allowing developers to identify critical security flaws like unauthorized note nullification, privacy leaks, and state inconsistencies. By leveraging real-time MCP server data to sync with current Aztec versions and verifying patterns against the latest API, it ensures that developers follow the specific private-public boundary rules and access control requirements unique to Aztec's zero-knowledge execution environment.

Key Features

Severity-based issue flagging from Critical to Low
Real-time API pattern verification via MCP server integration
Automated security auditing for Noir smart contracts
Context-aware reviews with automated contract discovery
Identification of privacy leaks and private state pitfalls
6 GitHub stars

Use Cases

Performing a final security check before deploying a Noir contract to the Aztec Network
Debugging complex interactions between private and public function calls
Onboarding developers to Aztec-specific patterns like note management and nullifiers

About

Key Features

Severity-based issue flagging from Critical to Low
Real-time API pattern verification via MCP server integration
Automated security auditing for Noir smart contracts
Context-aware reviews with automated contract discovery
Identification of privacy leaks and private state pitfalls
6 GitHub stars

Use Cases

Performing a final security check before deploying a Noir contract to the Aztec Network
Debugging complex interactions between private and public function calls
Onboarding developers to Aztec-specific patterns like note management and nullifiers