Yue-Zhou1 audit-common
Shared reference layer for the crypto audit framework.
When to Use
- Classifying a suspected finding as Critical, High, Medium, or Low
- Checking whether existing tests are strong enough to support a claim
- Writing or reviewing a finding that should follow the framework's standard structure
- Keeping sibling audit skills aligned on severity and evidence language
When NOT to Use
- Building initial audit context for a target codebase
- Verifying whether a suspected bug is real end-to-end
- Querying prior-art or disclosure state in
zkbugs-index
How to Use
Read the smallest reference that answers the current question:
- Severity question:
references/severity-framework.md - Test evidence question:
references/testing-evidence.md - Finding structure question:
references/finding-contract.md
Do not duplicate these definitions in sibling skills unless the duplication is strictly necessary for execution.
Reference Index
- references/severity-framework.md
- references/testing-evidence.md
- references/finding-contract.md