with one click
plamen
Launch the Plamen deterministic Web3 security audit pipeline
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Menu
Launch the Plamen deterministic Web3 security audit pipeline
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
| name | plamen |
| description | Launch the Plamen deterministic Web3 security audit pipeline |
Use this skill whenever the user invokes $plamen, /plamen, asks to
start, resume, or configure a Plamen audit, or asks for the Plamen wizard
inside Codex.
Do not manually orchestrate Plamen phases. Do not spawn recon, breadth, depth, verification, or report agents yourself. The Python driver is the sole owner of phase sequencing for both Claude and Codex routes.
Your job is the same job as the Claude /plamen command wizard:
{PROJECT_ROOT}/.scratchpad/config.json.For new Codex launches, config.json must set "cli_backend": "codex".
For existing audits, do not rewrite the config on resume.
Follow the Codex-native wizard references in this skill directory:
plamen-wizard.mdplamen-l1-wizard.mdRead only the relevant file:
l1, L1, infra, client, go, rust node, or
the target looks like a chain/client codebase, use plamen-l1-wizard.md.plamen-wizard.md.$plamen [l1] [light|core|thorough] [path] [docs:<path-or-url>] [scope:<path>] [notes:<text>] [--fresh]
$plamen resume [path-or-config]
Defaults:
pipeline: scmode: coreproject_root: current working directorycli_backend: codexDo not ask a model-selection question from this skill. The user is already running inside the model/backend they chose.
Codex route:
python ~/.codex/plamen/scripts/plamen_driver.py "{CONFIG_PATH}"
Fresh restart:
python ~/.codex/plamen/scripts/plamen_driver.py --fresh "{CONFIG_PATH}"
Protocol Type Trigger NAMED_EXTERNAL_PROTOCOL (detected when recon finds import/interface for an identifiable external protocol — not standard libraries). Researches known integration hazards of the target protocol.
Trigger Pattern Always required for DAML audits - Inject Into Breadth agents, depth-state-trace, depth-external
Trigger Pattern Always required for DAML audits - Inject Into Breadth agents, depth-state-trace, depth-edge-case
Trigger Pattern Always required for DAML audits - Inject Into Breadth agents, depth-external, depth-edge-case
Trigger Pattern Always required for DAML audits (self-skips if no template defines a key) - Inject Into Breadth agents, depth-state-trace
Trigger Pattern MONETARY_PARAMETER flag (fee, rate, emission, cap, bps as template fields) - Inject Into Breadth agents (merged via M4 hierarchy)