zk-skills and circom-auditor: Open-source security skills for coding agents, scoring 66 of 70 on zkbugs
================================================================================

zk-skills is zkSecurity's open-source set of security skills for Claude Code, Codex and Cursor. Its circom-auditor skill scores 66 of 70 known bugs with Claude Opus 4.8 and 64 of 70 with GPT-5.5 on the zkbugs benchmark in direct mode, and 40 of 56 and 14 of 56 on full original codebases, against 30 of 70 and 8 of 56 for the Ecne tool. It is positioned as a pre-audit first pass, with zkao as the continuous deep option.

Maintainer: zkSecurity
Website: https://github.com/zksecurity/zk-skills
Category: Cryptography and ZK specialists
Targets: Circom, Claude Code, Codex, Cursor
Approach: Agent skills (prompts, workflows and checklists) that turn a general coding agent into a Circom auditor
Access: Open source (MIT)
Status: Active (released 2026-08-05)
Strengths: Free, open and runnable today with the agent you already use. | Benchmarked publicly in both easy and hard modes. | Maintained by a firm that audits Circom for a living.
Limits: Circom only at release. | Depends on the underlying model and your agent setup; results vary run to run. | No validation layer; you triage everything.
Firms using it: zkSecurity
Sources: https://github.com/zksecurity/zk-skills | https://blog.zksecurity.xyz/posts/circom-auditor/

Source page: https://agentsast.com/tools/zk-skills/
Compiled by: agentsast editors (https://agentsast.com/about/)
Last reviewed: 2026-09-13