# Commitment Scheme Auditor

> Audit polynomial commitment schemes (KZG, FRI, IPA, Pedersen) for degree bound enforcement, evaluation proof verification, trusted setup provenance, and batch opening soundness.

- Skill: `yue-zhou1/commitment-scheme-auditor-2` (Agent Skill, multi-file: 5 files)
- Install (CLI): `npx skillmds@latest add yue-zhou1/commitment-scheme-auditor-2`
- Raw SKILL.md: https://api.skillmd.com/api/skills/yue-zhou1/commitment-scheme-auditor-2/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: Yue-Zhou1 (https://skillmd.com/u/yue-zhou1)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/yue-zhou1/commitment-scheme-auditor-2

---


# commitment-scheme-auditor

Domain auditor for polynomial commitment correctness and soundness assumptions.

## When to Use

- Reviewing KZG, FRI, IPA, or Pedersen commitment implementations
- Auditing degree bound checks and evaluation proof verification logic
- Checking trusted setup provenance and SRS handling
- Reviewing batch opening/random-combination security assumptions

## When NOT to Use

- Hash primitive parameter audits without commitment verifier context
- Generic transcript concerns with no commitment operation on path
- Marking suspected commitment issues as confirmed without verification gates

## Core Review Areas

1. Degree bound enforcement on committed polynomials
2. Evaluation proof verification at correct points and values
3. Trusted setup and parameter provenance integrity
4. Batch opening randomness and binding
5. Scheme-specific checks (FRI query schedule, IPA generator independence)

## Workflow

### Phase 1: Scheme and parameter inventory

- Read `references/commitment-checklist.md`
- Identify commitment scheme(s), parameter sets, and verifier pathways
- Mark any dynamic or external parameter loading points

### Phase 2: Opening verification review

- Execute `workflows/kzg-review.md`
- Verify opening equations, evaluation point ownership, and transcript binding
- Check degree bound checks occur before accepting commitment/opening tuples

### Phase 3: Pattern hunt

- Read `references/finding-patterns.md`
- Prioritize missing degree checks, premature challenge derivation, and untrusted setup loads

### Phase 4: Handoff

- Send surviving findings to `crypto-fp-check`
- Use `zkbugs-index` only after verification succeeds

## Output Contract

Produce a commitment-audit handoff that includes:

- The scheme variant (KZG/FRI/IPA/Pedersen) and proof path involved
- The exact bound, opening, or setup integrity gap
- Whether the issue affects soundness, completeness, or configuration trust
- The next verification or reporting route

## Reference Index

- [references/commitment-checklist.md](references/commitment-checklist.md)
- [references/finding-patterns.md](references/finding-patterns.md)
- [workflows/kzg-review.md](workflows/kzg-review.md)