PlamenTSV/plamen

242 stars · Last commit 2026-05-26

Autonomous Web3 security audit agent for Claude Code

README preview

# Plamen (v2.0.2)

Autonomous Web3 security auditor for [Claude Code](https://docs.anthropic.com/en/docs/claude-code) and [OpenAI Codex CLI](https://github.com/openai/codex).

Orchestrates 18-100 AI agents across 8 phases to produce audit reports with verified PoC exploits — for **smart contracts** and **L1 node-client infrastructure**.

Supports **EVM/Solidity**, **Solana/Anchor**, **Aptos Move**, **Sui Move**, **Soroban/Stellar**, and **L1 Go/Rust node clients**.

---

## Prerequisites

[Claude Code CLI](https://docs.anthropic.com/en/docs/claude-code) or [OpenAI Codex CLI](https://github.com/openai/codex), [Python 3.11-3.12](https://python.org) + pip, [Node.js 18+](https://nodejs.org), [Git](https://git-scm.com)

> **Backend CLIs.** Install at least one. If you only have time to install
> one, pick **Claude Code** — it has the broadest MCP support (Slither,
> ChromaDB, Solodit). Codex is a strong alternative when you'd rather use
> OpenAI models, but pure-LLM phases fall back to WebSearch where MCPs aren't
> available. You can install both side-by-side; the audit wizard lets you
> pick per-run.

View full repository on GitHub →