Tools
Every tool in the catalog, pinned to a commit, with its license. The report names the tools that ran.
Tools are pinned by commit, not by tag. License notices are reproduced from each upstream repository. Results come from tools we run; the version of each tool is shown in every report. Pins recorded 2026-10-25.
Third-party tools are listed by name for transparency. Names belong to their owners and do not imply endorsement or affiliation. Open-source notices are reproduced as published by their authors (the MIT license requires keeping the copyright notice).
Single-phase skill with 8 parallel agents (per the upstream files). Listed as its own tool because its behavior differs from v3.
Attacker-framing rewrite with 12 parallel agents (per the upstream files).
Detector library plus a detector, reasoner and critic pass. The upstream author reports a low-noise, low-recall profile; we have not measured it.
Note. Detection content includes MIT-licensed material from pashov/skills, PlamenTSV/plamen and forefy/.context; the notice chain is reproduced in reports.
Rebuilds the contracts as they are deployed, then runs an audit pass over that view. It prepares input for other tools and is not yet a stand-alone finder.
Deep, slow and costly. Runs fork proofs of concept where its adapter supports them.
Note. The root license is MIT, but optional bundled components carry other licenses (AGPL-3.0, CC BY-NC-SA 4.0, and LGPL-2.1 with the Commons Clause). Our plan is to exclude those components from the analysis image and block runtime downloads. Legal review is pending, so treat this entry as provisional.
solidity-auditor versions are separate entries because their behavior differs; they come from one upstream, so agreement between them is not independent.