web3-audit-response-toolkit

Validates smart contract audit report findings by creating PoC tests that confirm or dispute each claimed vulnerability. Produces structured artifacts per finding — ISSUE.md with PoC test for confirmed vulnerabilities, DISPUTE.md for false positives, DUPLICATE.md for duplicates — and a final scorecard grading the audit. Triggers on smart contract audit report review, finding triage, PoC creation, severity assessment, or audit dispute.

Use when combining findings from multiple audit campaigns into a single deduplicated coverage grid with competition-style auditor scoring. Creates local artifacts first; optionally publishes to GitHub. Consumes artifacts from reviewing-audit-reports sessions.

Use when fixing a confirmed audit finding, converting a validation PoC into a regression test, creating a bugfix branch for an audit vulnerability, implementing a fix for a reviewed finding with an existing ISSUE.md and POC, or resolving audit remediation items using TDD. Picks up where reviewing-audit-reports leaves off — takes confirmed findings and resolves them.