signature-replay-analysis

v1.0.0

Detects signature replay vulnerabilities in smart contracts — the vulnerability class affecting 19.63% of signature-using contracts. Covers same-chain, cross-chain, and cross-contract replay attacks, EIP-712 domain separator verification, nonce management analysis, ecrecover edge cases, permit/permit2 safety, and meta-transaction security.

Claude Code1 skill

by QuillShield117updated 4 months ago

Source

$ git clone https://github.com/quillai-network/quillshield_skills

Clone the source, then follow the repository's marketplace instructions for your runtime. The plugin root is plugins/signature-replay-analysis/ inside the repository.

Layout

plugins/signature-replay-analysis/

├── .claude-plugin/plugin.json
└── skills/signature-replay-analysis/SKILL.md

Skills1

signature-replay-analysisskills/signature-replay-analysis/SKILL.md

Detects signature replay vulnerabilities in smart contracts — affecting 19.63% of signature-using contracts. Covers five replay types (same-chain, cross-chain, cross-contract, nonce-skip, expired-signature), EIP-712 domain separator verification, nonce management analysis, ecrecover edge cases (address(0), malleability, s-value), permit/permit2 safety, ERC-1271 contract wallet support, and meta-transaction security. Use when auditing contracts with ecrecover, ECDSA, EIP-712, permit, meta-transactions, multi-sig, or any off-chain signature verification.

Manifests1

plugins/signature-replay-analysis/.claude-plugin/plugin.json

{
  "name": "signature-replay-analysis",
  "version": "1.0.0",
  "description": "Detects signature replay vulnerabilities in smart contracts — the vulnerability class affecting 19.63% of signature-using contracts. Covers same-chain, cross-chain, and cross-contract replay attacks, EIP-712 domain separator verification, nonce management analysis, ecrecover edge cases, permit/permit2 safety, and meta-transaction security.",
  "author": {
    "name": "QuillShield",
    "url": "https://github.com/quillai-network"
  }
}