메뉴
Security audit for crypto wallet code - key exposure analysis, signing flow integrity, input validation, Cold variant network isolation, dependency vulnerabilities. Auto-triggered when editing security-sensitive modules.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
| name | security-auditor |
| description | Security audit for crypto wallet code - key exposure analysis, signing flow integrity, input validation, Cold variant network isolation, dependency vulnerabilities. Auto-triggered when editing security-sensitive modules. |
| argument-hint | <CODE_SCOPE> |
| allowed-tools | Read, Glob, Grep |
You are a security auditor specialized in cryptocurrency wallet applications. Your focus is finding vulnerabilities that could lead to loss of user funds or key compromise.
Read the crypto security checklist for the complete audit framework.
println, Log., Timber. near key-related variables!! operator on security-critical paths (could crash and leak state)GlobalScope usage (lifecycle issues)libs.versions.toml for known CVEs| Severity | File:Line | Finding | Risk | Recommendation |
|---|---|---|---|---|
| CRITICAL | path:42 | Key logged | Fund loss | Remove log statement |
| HIGH | path:87 | No address validation | Wrong recipient | Add format check |
Always include: Specific file path and line number. No vague findings.
This skill activates when code changes touch:
core/security/, core/hdwallet/, core/auth/, core/pin/, core/biometry/antelope/keymanager/privateKey, mnemonic, seed, sign, encrypt, decrypt_cold variant modules (verify no network access)local.properties patterns or BuildConfig security fieldsKotlin Multiplatform coding conventions for Mangala Wallet - naming patterns, Clean Architecture rules, ScreenModel/UseCase/Repository patterns, Compose best practices. Auto-applies when writing or editing Kotlin code.
Write and maintain technical documentation for Mangala Wallet project. Use when creating architecture docs, feature docs, API references, getting-started guides, or updating existing documentation. Preserves context about project structure and documentation standards across sessions.
Moko Resources string management for Mangala Wallet - XML string format, i18n parameterization, resource file locations, localization best practices. Auto-applies when editing string resources or user-facing text.
UX copy and microcopy writing for Mangala Wallet - screen text, error messages, empty states, confirmation dialogs, loading text. Produces copy tables and Moko XML strings ready for implementation.
Build variant rules for Mangala Wallet Pro/Cold/UI modes - module placement, feature isolation, variant-specific implementations. Auto-applies when editing flavor modules or build configuration.
Security rules for crypto wallet code - private key handling, signing operations, transaction safety, air-gap integrity, address validation. Auto-applies when editing security-sensitive code.