What it can do: auditsentry
Plugin bundle · Iktok Security Labs
What auditsentry declares, asks for and runs, according to the marketplaces we read. Installs into the AI tool as a plugin bundle; what it starts is listed below. Environment variables it asks for: 12, secrets among them: 5. As of our marketplace pass on 2026-10-22.
This is not a security audit. We list what the marketplaces publish about this plugin: what it declares, what it asks for and what it runs. We do not run or inspect its code, and a verified mark is the marketplace's statement, not ours.
Where it runs
- Installs into the AI tool as a plugin bundle; what it starts is listed below.
What it declares
None of the marketplaces we read publishes a list of tools for it.
Prompts and resources: the marketplaces we read do not publish them.
What it asks for
Environment variables it asks for: 12, secrets among them: 5. As declared on: Community GitHub marketplaces.
ARBISCAN_API_KEYsecret requiredBASESCAN_API_KEYsecret requiredBERATRAIL_API_KEYsecret requiredECHIDNA_PATHrequiredETHERSCAN_API_KEYsecret requiredHALMOS_PATHrequiredMEDUSA_PATHrequiredMYTHRIL_PATHrequiredSLITHER_PATHrequiredTENDERLY_ACCESS_KEYsecret requiredTENDERLY_ACCOUNTrequiredTENDERLY_PROJECTrequired
Names only: we keep no values, examples or descriptions of these variables. OAuth scopes and install-time settings are not published by the marketplaces we read.
What it runs besides MCP
Skills: 45 As declared on: Community GitHub marketplaces.
access-controlapproval-issuescaching-and-incrementalcentralization-riskconfidence-scoringcosmwasmcross-chain-messagingcross-contract-statedelegatecall-risksdiamond-eip2535dos-vectorserc1271-contract-signatures
Show the remaining 33
erc4337-account-abstractionerc4626-inflationfalse-positive-feedback-loopfee-on-transferflash-loan-attacksinitializationinline-assemblyinteger-issuesintents-erc7683known-good-comparisonliquidation-cascademev-frontrunningmev-pbsmulti-pass-self-critiqueoracle-manipulationoracle-redundancypermit2-patternspragma-and-addressesprogress-and-streamingreentrancyrestaking-eigenlayerselfdestruct-eip6780signature-malleabilitysignature-replaysolana-anchorstorage-layoutstylus-rusttoken-compatibilitytx-context-misuseunchecked-callsve-lock-governancevyper-specificzk-verifier-bugs
Commands: 45 As declared on: Community GitHub marketplaces.
auditaudit-changesaudit-deepaudit-depsaudit-diffaudit-historyaudit-liveaudit-multi-chainaudit-strictbountybounty-submitcard
Show the remaining 33
coveragedemodiff-auditdismissexplainexploitexploit-chainexploit-livefuzzgasinvariantmint-certmonitormythrilnotify-discordnotify-slackpre-deployproverquick-scanremediatereplay-incidentreportrug-checkrugproof-initscoresimulateslithersymbolictest-gentweetupgrade-safetyverify-deployverify-finding
Agents: 23 As declared on: Community GitHub marketplaces.
aa-specialistamm-specialistassembly-auditorattackerbridge-specialistcrosschain-messaging-specialistdefendereconomic-rug-specialistexploit-poc-writergas-optimizergovernance-specialistintents-specialist
Show the remaining 11
invariant-writerl2-sequencer-specialistlending-specialistnft-specialistremediation-suggesterreport-writerrestaking-specialiststaking-specialistvyper-specialistyield-aggregator-specialistzk-verifier-specialist
Hooks: 2 As declared on: Community GitHub marketplaces.
PostToolUsePreToolUse
Who answers for it
Iktok Security Labs
- No marketplace we read marks it or its publisher as verified.
- License: MIT.
How it has changed
Its tools, settings, hooks and composition have not changed since we started watching it.
In context
- Median number of secrets a plugin bundle asks for on the marketplaces we read: 0.0. This one asks for: 5.
- Share of plugin bundles that run on a remote server: 8%.
Where it is published and how its figures have moved
Compare it side by side with similar plugins
Data comes from public marketplace files in GitHub repositories of their authors. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.