input-arithmetic-safety
v1.0.0Detects input validation failures and arithmetic vulnerabilities in smart contracts — the #1 direct exploitation cause at 34.6% of cases. Covers missing zero-checks, precision loss from division-before-multiplication, rounding direction exploitation, ERC4626 inflation attacks, unsafe casting, dust amount exploitation, and Solidity 0.8+ edge cases in unchecked blocks.
by QuillShield117updated 4 months ago
Source
git clone https://github.com/quillai-network/quillshield_skillsClone the source, then follow the repository's marketplace instructions for your runtime. The plugin root is plugins/input-arithmetic-safety/ inside the repository.
Layout
├── .claude-plugin/plugin.json└── skills/input-arithmetic-safety/SKILL.md
Skills1
Detects input validation failures and arithmetic vulnerabilities in smart contracts. Covers missing zero-address and zero-amount checks, division-before-multiplication precision loss, rounding direction exploitation, ERC4626 vault share inflation attacks, unsafe integer casting, dust amount exploitation, and Solidity 0.8+ unchecked block edge cases. Use when auditing contracts with fee calculations, share pricing, exchange rates, unchecked blocks, or any public-facing functions that accept user input.
Manifests1
{
"name": "input-arithmetic-safety",
"version": "1.0.0",
"description": "Detects input validation failures and arithmetic vulnerabilities in smart contracts — the #1 direct exploitation cause at 34.6% of cases. Covers missing zero-checks, precision loss from division-before-multiplication, rounding direction exploitation, ERC4626 inflation attacks, unsafe casting, dust amount exploitation, and Solidity 0.8+ edge cases in unchecked blocks.",
"author": {
"name": "QuillShield",
"url": "https://github.com/quillai-network"
}
}