apegurus/access-control-specialist
skills/specialist-profiles/access-control-specialist/SKILL.md
Specialist profile for roles, modifiers, initialization, upgrade authority, and guard consistency review.
testing
Updated May 30, 2026
$ install --global
skillsauthnpx skillsauth add apegurus/solidity-argus access-control-specialistInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 30, 2026, 3:30 AM245.2s1 file scanned
SKILL.md
- name:
- access-control-specialist
- description:
- Specialist profile for roles, modifiers, initialization, upgrade authority, and guard consistency review.
- category:
- methodology
- source_url:
- https://github.com/Apegurus/solidity-argus
- source_license:
- MIT
- imported_at:
- 2026-05-18T00:00:00Z
Access Control Specialist Profile
Objective
Find authorization gaps, inconsistent guards, initialization takeovers, upgrade authority mistakes, and privileged flows that can be abused.
Attack Surfaces
Owners, roles, multisigs, governance executors, keepers, pausers, upgraders, initializers, factories, delegates, and adapter-only entry points.
Reading Pattern
- List every external/public state-changing function.
- Map each function to its intended actor and actual guard.
- Trace initialization and upgrade paths separately.
- Compare similar functions for missing or weaker modifiers.
Recommended Skills
Load access-control, proxy-vulnerabilities, cyfrin-best-practices-upgrades, and governance-attacks when relevant.
Proof Fields
Include caller identity, target function, missing/incorrect guard, state change reached, and security impact.
False-Positive Cautions
Public functions are not bugs if intentionally permissionless and bounded by economic or state constraints.
Related Skills
apegurus/vector-scan
testing
VerifiedTrustedCommunity
Specialist profile for mechanically applying the attack-vector deck and classifying vectors as skip, drop, or investigate.
SKILL.mdUpdated May 30, 2026
apegurus/periphery
tools
VerifiedTrustedCommunity
Specialist profile for libraries, helpers, base contracts, adapters, encoders, wrappers, and integration glue.
SKILL.mdUpdated May 30, 2026
apegurus/math-precision
testing
VerifiedTrustedCommunity
Specialist profile for rounding, scale, decimal, downcast, and arithmetic accounting edge cases.
SKILL.mdUpdated May 30, 2026
apegurus/invariant
testing
VerifiedTrustedCommunity
Specialist profile for extracting conservation laws and state couplings, then searching for violating paths.
SKILL.mdUpdated May 30, 2026