plamentsv/plamen
codex-adapter/skills/plamen/SKILL.md
Launch the Plamen deterministic Web3 security audit pipeline
$ install --global
skillsauthnpx skillsauth add plamentsv/plamen plamenInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 14, 2026, 5:50 AM133.2s1 file scanned
SKILL.md
- name:
- plamen
- description:
- Launch the Plamen deterministic Web3 security audit pipeline
Plamen V2 Wizard Launcher For Codex
Use this skill whenever the user invokes $plamen, /plamen, asks to
start, resume, or configure a Plamen audit, or asks for the Plamen wizard
inside Codex.
Hard Rule
Do not manually orchestrate Plamen phases. Do not spawn recon, breadth, depth, verification, or report agents yourself. The Python driver is the sole owner of phase sequencing for both Claude and Codex routes.
Your job is the same job as the Claude /plamen command wizard:
- Detect an existing audit and offer resume/fresh/new.
- Collect missing launch parameters.
- Write or reuse
{PROJECT_ROOT}/.scratchpad/config.json. - Launch the deterministic driver.
- Report the resume command and basic status.
For new Codex launches, config.json must set "cli_backend": "codex".
For existing audits, do not rewrite the config on resume.
Wizard Files
Follow the Codex-native wizard references in this skill directory:
- Smart-contract audits:
plamen-wizard.md - L1 infrastructure audits:
plamen-l1-wizard.md
Read only the relevant file:
- If the user says
l1,L1,infra,client,go,rust node, or the target looks like a chain/client codebase, useplamen-l1-wizard.md. - Otherwise use
plamen-wizard.md.
Invocation Syntax
$plamen [l1] [light|core|thorough] [path] [docs:<path-or-url>] [scope:<path>] [notes:<text>] [--fresh]
$plamen resume [path-or-config]
Defaults:
pipeline:scmode:coreproject_root: current working directorycli_backend:codex
Do not ask a model-selection question from this skill. The user is already running inside the model/backend they chose.
Driver Commands
Codex route:
python ~/.codex/plamen/scripts/plamen_driver.py "{CONFIG_PATH}"
Fresh restart:
python ~/.codex/plamen/scripts/plamen_driver.py --fresh "{CONFIG_PATH}"
Related Skills
plamentsv/audit-prep
development
VerifiedTrustedCommunity
Prepare Solidity projects for a security audit — test coverage, test quality, NatSpec docs, code hygiene, dependency health, best-practice enforcement, deployment readiness, and project documentation checks. Generates a scored Audit Readiness Report and optionally runs static analysis. Trigger on: "prepare for audit", "audit readiness", "pre-audit check", "audit prep", "NatSpec check", or any request to review a Solidity codebase before a security review.
225SKILL.mdUpdated May 14, 2026
plamentsv/plamen-wizard
development
VerifiedTrustedCommunity
Run the Plamen smart-contract audit wizard in Codex
225SKILL.mdUpdated May 14, 2026
plamentsv/plamen-l1
testing
VerifiedTrustedCommunity
Launch the Plamen deterministic L1 infrastructure audit pipeline
225SKILL.mdUpdated May 14, 2026
plamentsv/plamen-l1-wizard
development
VerifiedTrustedCommunity
Run the Plamen L1 infrastructure audit wizard in Codex
225SKILL.mdUpdated May 14, 2026