Autonomous smart contract security auditor for Claude Code.

Orchestrates 15-95 AI agents across 8 phases to produce audit reports with verified PoC exploits. Supports EVM/Solidity, Solana/Anchor, Aptos Move, and Sui Move.

Claude Code CLI, Python 3.11-3.12 + pip, Node.js 18+, Git

macOS: Also run xcode-select --install (needed for C++ dependency compilation).

Windows: Enable Developer Mode before installing (required for symlinks). Settings > System > For Developers > toggle ON. Or in admin PowerShell: reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock /v AllowDevelopmentWithoutDevLicense /t REG_DWORD /d 1 /f

Per-language tools (Foundry, Solana CLI, etc.) are installed automatically via plamen setup.

Open Claude Code and paste the contents of SETUP.md. Claude handles cloning, symlink installation, dependency setup, and RAG database building automatically.

Linux / macOS:

git clone https://github.com/PlamenTSV/plamen.git ~/.plamen export SOLODIT_API_KEY=your_key_here # free at solodit.cyfrin.io (recommended for RAG quality) cd ~/.plamen && python3 plamen.py install

Windows (PowerShell):

git clone https://github.com/PlamenTSV/plamen.git $HOME\.plamen $env:SOLODIT_API_KEY = "your_key_here" # free at solodit.cyfrin.io (recommended for RAG quality) cd $HOME\.plamen; python plamen.py install

Python dependencies are installed automatically on first run. On macOS/Linux use python3, on Windows use python. Set SOLODIT_API_KEY before install — the RAG database builds during setup and Solodit is the largest source (3400+ findings).

After install, add to PATH so you can run plamen from anywhere:

Linux (bash):

echo 'export PATH="$HOME/.plamen:$PATH"' >> ~/.bashrc && source ~/.bashrc

macOS (zsh):

echo 'export PATH="$HOME/.plamen:$PATH"' >> ~/.zshrc && source ~/.zshrc

Windows (PowerShell, one-time):

[System.Environment]::SetEnvironmentVariable("Path", "$env:USERPROFILE\.plamen;" + [System.Environment]::GetEnvironmentVariable("Path", "User"), "User")

Then use plamen from anywhere:

plamen # interactive wizard plamen setup # install tools + build RAG plamen rag # rebuild RAG database only plamen uninstall # remove Plamen from ~/.claude

Important: Always use plamen (not python3 plamen.py) after PATH is set. The python3 plamen.py form only works from inside ~/.plamen/.

The installer:

• Creates symlinks from ~/.plamen into ~/.claude/ so Claude Code discovers Plamen's agents, rules, prompts, and commands
• Merges Plamen's permissions into your existing settings.json (additive only — won't remove your entries)
• Merges MCP server definitions into mcp.json (won't overwrite your existing servers)
• Injects Plamen instructions into CLAUDE.md between <!-- PLAMEN:START/END --> markers (preserves your content)
• Installs Python dependencies and builds the RAG database

Your existing Claude Code configuration is preserved.

Migrating from v1.0.x (installed directly in ~/.claude): Close Claude Code first, then run both commands together:

Linux/macOS: mv ~/.claude ~/.plamen && cd ~/.plamen && python3 plamen.py install

Windows (PowerShell): Rename-Item $HOME\.claude $HOME\.plamen; cd $HOME\.plamen; python plamen.py install

This moves the repo to ~/.plamen and immediately recreates ~/.claude with symlinks + merged config. Claude Code will not work between the move and install — run them together.

cd ~/.plamen # 1. Python deps (~2GB download — PyTorch for embeddings) pip install -r requirements.txt pip install -r custom-mcp/unified-vuln-db/requirements.txt pip install -r custom-mcp/solodit-scraper/requirements.txt pip install -r custom-mcp/defihacklabs-rag/requirements.txt pip install -e custom-mcp/solana-fender pip install -r custom-mcp/farofino-mcp/requirements.txt pip install -e custom-mcp/slither-mcp # EVM only (needs Python 3.11+) # 2. Build RAG database (~5 min) export SOLODIT_API_KEY=your_key_here # free at solodit.cyfrin.io cd custom-mcp/unified-vuln-db python3 -m unified_vuln.indexer index -s solodit --max-pages 10 python3 -m unified_vuln.indexer index -s defihacklabs python3 -m unified_vuln.indexer index -s immunefi cd ../.. # Note: on Windows use 'python' instead of 'python3' # 3. Chain tools (install what you need) curl -L https://foundry.paradigm.xyz | bash && foundryup # EVM pip install slither-analyzer # EVM static analysis # See docs/setup.md for Solana, Aptos, Sui, Medusa, Trident

plamen # terminal wrapper with interactive wizard

Or inside Claude Code: /plamen

See docs/audit-modes.md for the full comparison.

Terminal wrapper (recommended — includes setup, cost estimation):

plamen # interactive wizard plamen core /path/to/project # skip wizard plamen thorough /path/to/project --proven-only # strict evidence mode plamen setup # install tools only

Inside Claude Code:

> /plamen core > /plamen thorough docs: whitepaper.pdf scope: scope.txt 

See docs/usage.md for PATH setup and all CLI options.

Language detection is automatic based on config files.

See CONTRIBUTING.md. Skills are the most impactful contribution — teach methodology (how to look), not patterns (what to find).

MIT

• Trail of Bits — Slither MCP server
• Farofino — Aderyn integration
• SunWeb3Sec — DeFiHackLabs exploit corpus
• Solodit — Audit finding database
• Anthropic — Claude Code runtime