apegurus/periphery
skills/specialist-profiles/periphery/SKILL.md
Specialist profile for libraries, helpers, base contracts, adapters, encoders, wrappers, and integration glue.
tools
Updated May 30, 2026
$ install --global
skillsauthnpx skillsauth add apegurus/solidity-argus peripheryInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 30, 2026, 3:30 AM179.6s1 file scanned
SKILL.md
- name:
- periphery
- description:
- Specialist profile for libraries, helpers, base contracts, adapters, encoders, wrappers, and integration glue.
- category:
- methodology
- source_url:
- https://github.com/Apegurus/solidity-argus
- source_license:
- MIT
- imported_at:
- 2026-05-18T00:00:00Z
Periphery Profile
Objective
Find bugs hidden in supporting code that changes semantics before calls reach core contracts.
Attack Surfaces
Libraries, inherited base contracts, routers, adapters, wrappers, encoders, factories, deployment scripts, allowlists, and helper math.
Reading Pattern
- Identify all code that prepares, wraps, routes, or translates calls to core contracts.
- Compare units, address assumptions, calldata layout, and access checks between periphery and core.
- Search for differences between direct core calls and periphery-mediated calls.
- Check inherited hooks and overridden functions for unexpected side effects.
Recommended Skills
Load logic-errors, unsafe-erc20-transfers, incorrect-inheritance-order, and protocol integration skills as needed.
Proof Fields
Include periphery path, semantic mismatch, affected core call, and exploit impact.
False-Positive Cautions
Periphery bugs matter when users, integrations, or privileged flows actually rely on the periphery path.
Related Skills
apegurus/vector-scan
testing
VerifiedTrustedCommunity
Specialist profile for mechanically applying the attack-vector deck and classifying vectors as skip, drop, or investigate.
SKILL.mdUpdated May 30, 2026
apegurus/math-precision
testing
VerifiedTrustedCommunity
Specialist profile for rounding, scale, decimal, downcast, and arithmetic accounting edge cases.
SKILL.mdUpdated May 30, 2026
apegurus/invariant
testing
VerifiedTrustedCommunity
Specialist profile for extracting conservation laws and state couplings, then searching for violating paths.
SKILL.mdUpdated May 30, 2026
apegurus/first-principles
testing
VerifiedTrustedCommunity
Specialist profile for line-by-line assumption extraction without relying on named bug classes.
SKILL.mdUpdated May 30, 2026