auditor-quiz

name

auditor-quiz

description

Generate and administer interactive knowledge quizzes for security auditors based on repository documentation and code. Use when an auditor needs to be tested on their understanding of a codebase, protocol mechanics, security considerations, potential vulnerabilities, or core functionality. Triggers include requests like "quiz me on", "test my knowledge", "generate a quiz", or when preparing for security audits and code reviews.

Auditor Quiz Skill

Generate focused, security-oriented quizzes to test auditor understanding of codebases, protocols, and documentation.

Overview

This skill creates 8-10 question quizzes that focus on:

• Protocol/system understanding and core mechanisms
• Weakness points and potential vulnerabilities
• Security considerations and attack vectors
• Core functionality and critical code paths

Questions are generated from repository documentation (README, docs/, whitepapers, specifications, inline comments) and presented interactively with immediate feedback.

Workflow

1. Identify documentation sources

   • Search for documentation files: *.md, README*, docs/*, *.sol (comments), *.rs (comments), etc.
   • Prioritize: security docs, architecture docs, README, specification files
   • Use grep/glob to find relevant files efficiently

2. Analyze documentation

   • Read and synthesize key information about:
     • Core protocol/system mechanics
     • Security assumptions and trust boundaries
     • Known edge cases or limitations
     • Critical functions and state transitions
     • Potential attack vectors or vulnerability areas