X Ray
Generates an x-ray.md pre-audit report covering overview, enhanced threat model...
Install
npx skills add pashov/skills --skill x-ray -g -a claude-code -y- Repository
- pashov/skills1.3k
- Category
- Testing
- Updated
- 14d ago
- License
- MIT
- Context cost
- Mediumabout 3,000 tokens
- Runs scripts
- Yes, review before use
What it does
Generates an x-ray.md pre-audit report covering overview, enhanced threat model (protocol-type profiling, git-weighted attack surfaces, temporal risk analysis, composability dependency mapping), invariants, integrations, docs quality, test analysis, and developer/git history. Triggers on 'x-ray', 'audit readiness', 'readiness report', 'pre-audit report', 'prep this protocol', 'protocol prep', 'summarize this protocol'.
X-Ray
Generate an x-ray/ folder at the project root containing all output files. Pipeline: 3 steps, always sequential.
$SKILL_DIR = the directory containing this SKILL.md file. Resolve it from the path you loaded this skill from (e.g. if this file is at /path/to/x-ray/SKILL.md, then $SKILL_DIR = /path/to/x-ray).
Progress tracking (MANDATORY)
Before doing anything else, call TodoWrite with these 3 todos (all pending):
Phase 1: Enumerate & measure codebasePhase 2: Read sources, classify entry points, synthesize invariantsPhase 3: Write x-ray report files
Transitions (update via TodoWrite, never batch):
- Mark Phase 1
in_progressimmediately, before runningenumerate.sh. - When Step 1's parallel batch returns, in ONE TodoWrite call mark Phase 1
completedand Phase 2in_progress. - When Step 2 (including 2b, 2g) finishes, in ONE TodoWrite call mark Phase 2
completedand Phase 3in_progress. - After all Step 3 output files are written, mark Phase 3
completed.
Rule: exactly one todo is in_progress at any time. Status updates happen the moment a phase starts or ends.
Step 1: Enumerate & Measure
If the user specifies a path, use it as project root. Otherwise use cwd. If no .sol files or foundry.toml/hardhat.config.* at root, check one level deep.
Source directory detection: Auto-detect from foundry.toml (src = "...") or hardhat.config.*. If no config, try both src/ and contracts/. Read foundry.toml first if present.
Run enumeration (single Bash call, includes output directory creation):
mkdir -p [project-root]/x-ray && bash $SKILL_DIR/scripts/enumerate.sh [project-root] [src-dir]
Immediately after, launch ALL of the following in a single message (parallel):


