Updated 6mo ago
by quillai-network
quillshield_skills
Structured skills for smart contract security audits. Infers state invariants, detects semantic guard gaps, models flash loan + oracle attack chains, simulates adversarial exploits, and scores findings.
129 GitHub stars (129)
+1 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | +1 |
| Oct 8 | 0 |
| Oct 9 | +1 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | −1 |
| Oct 15 | 0 |
| Oct 16 | 0 |
- 11 skills (11 skills found in its SKILL.md files)
- 27 forks (27 forks)
- 6mo ago last update (Last updated 6mo ago)
Install
Skills CLI
npx skills add quillai-network/quillshield_skills
Asks which skills and agents to install. Just one: npx skills add quillai-network/quillshield_skills --skill behavioral-state-analysis — add -g for every project.
Claude Code
git clone https://github.com/quillai-network/quillshield_skillscp -r "quillshield_skills/plugins/behavioral-state-analysis/skills/behavioral-state-analysis" ~/.claude/skills/
Copies the behavioral-state-analysis skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add quillai-network/quillshield_skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
behavioral-state-analysis
Token-efficient smart contract security auditing via Behavioral State Analysis (BSA). Scopes analysis to contract type, runs only relevant threat engines, and uses tiered output depth. Use for auditing smart contracts, security reviews, or DeFi threat modeling.
plugins/behavioral-state-analysis/skills/behavioral-state-analysis/SKILL.md on GitHub (opens in a new tab) -
defender
Blue-team release-gate analysis for smart contract deployment and upgrade readiness. Classifies repositories, checks deploy/upgrade execution paths, CI/CD trust boundaries, config drift, secrets/signer operational security, and outputs evidence-backed release verdicts.
plugins/defender/skills/defender/SKILL.md on GitHub (opens in a new tab) -
dos-griefing-analysis
Detects Denial of Service and griefing vulnerabilities in smart contracts. Covers unbounded loop DoS, block gas limit exhaustion, external call failure DoS, insufficient gas griefing (63/64 rule), storage bloat attacks, timestamp griefing, self-destruct force-feeding, and push vs pull payment pattern analysis. Use when auditing contracts with batch operations, loops over user data, reward distrib…
plugins/dos-griefing-analysis/skills/dos-griefing-analysis/SKILL.md on GitHub (opens in a new tab) -
external-call-safety
Detects unsafe external call patterns and token integration vulnerabilities in smart contracts. Covers unchecked call/delegatecall/staticcall return values, fee-on-transfer tokens, rebasing tokens, tokens with missing return values (USDT), ERC-777 callback risks, unsafe approve race conditions, return data bombs, gas stipend limitations, and push vs pull payment patterns. Use when auditing contra…
plugins/external-call-safety/skills/external-call-safety/SKILL.md on GitHub (opens in a new tab) -
input-arithmetic-safety
Detects input validation failures and arithmetic vulnerabilities in smart contracts. Covers missing zero-address and zero-amount checks, division-before-multiplication precision loss, rounding direction exploitation, ERC4626 vault share inflation attacks, unsafe integer casting, dust amount exploitation, and Solidity 0.8+ unchecked block edge cases. Use when auditing contracts with fee calculatio…
plugins/input-arithmetic-safety/skills/input-arithmetic-safety/SKILL.md on GitHub (opens in a new tab) -
oracle-flashloan-analysis
Detects price oracle manipulation and flash loan attack vectors in DeFi smart contracts. Classifies oracle trust models (Chainlink, TWAP, spot price, custom), identifies stale price risks, circular price dependencies, and flash loan atomicity exploitation patterns. Use when auditing DeFi protocols that depend on price data, oracle integrations, lending protocols, DEXs, derivatives, or any contrac…
plugins/oracle-flashloan-analysis/skills/oracle-flashloan-analysis/SKILL.md on GitHub (opens in a new tab) -
proxy-upgrade-safety
Detects vulnerabilities in upgradeable proxy smart contracts including storage layout collisions, uninitialized implementations, function selector clashing, delegatecall context issues, and upgrade path safety. Covers Transparent Proxy, UUPS (EIP-1822), Beacon, Diamond (EIP-2535), and Minimal Proxy (EIP-1167) patterns. Use when auditing upgradeable contracts, reviewing implementation upgrades, an…
plugins/proxy-upgrade-safety/skills/proxy-upgrade-safety/SKILL.md on GitHub (opens in a new tab) -
reentrancy-pattern-analysis
Systematically detects all reentrancy vulnerability variants in smart contracts — classic, cross-function, cross-contract, and read-only reentrancy. Builds call graphs, verifies CEI (Checks-Effects-Interactions) pattern compliance, traces state changes relative to external calls, and identifies callback vectors through ERC-777/ERC-1155 hooks. Use when auditing contracts that make external calls,…
plugins/reentrancy-pattern-analysis/skills/reentrancy-pattern-analysis/SKILL.md on GitHub (opens in a new tab) -
semantic-guard-analysis
Detects logic vulnerabilities in smart contracts by analyzing guard-state consistency patterns. Identifies functions that bypass security checks (require, modifiers) that other functions consistently apply. Uses the Consistency Principle — a contract is its own specification. Use when auditing smart contracts for missing access controls, inconsistent pause checks, logic bugs, forgotten modifiers,…
plugins/semantic-guard-analysis/skills/semantic-guard-analysis/SKILL.md on GitHub (opens in a new tab) -
signature-replay-analysis
Detects signature replay vulnerabilities in smart contracts — affecting 19.63% of signature-using contracts. Covers five replay types (same-chain, cross-chain, cross-contract, nonce-skip, expired-signature), EIP-712 domain separator verification, nonce management analysis, ecrecover edge cases (address(0), malleability, s-value), permit/permit2 safety, ERC-1271 contract wallet support, and meta-t…
plugins/signature-replay-analysis/skills/signature-replay-analysis/SKILL.md on GitHub (opens in a new tab) -
state-invariant-detection
Detects broken mathematical relationships between state variables in smart contracts. Automatically infers invariants (totalSupply = sum(balances), conservation laws, ratio constraints) then finds functions that violate them. Catches unauthorized minting, broken tokenomics, accounting desynchronization, and state drift. Use when auditing for state-state invariant violations, broken accounting, su…
plugins/state-invariant-detection/skills/state-invariant-detection/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
superpowersby obra An agentic skills framework & software development methodology that works.
-
agent-skillsby addyosmani Production-grade engineering skills for AI coding agents.
-
skillsby google Agent Skills for Google products and technologies
-
garden-skillsby ConardLi ConardLi's open-source Skills collection, featuring web design, knowledge retrieval, image generation, and more.
-
ui-skillsby ibelick Skills for Design Engineers
-
Claude-Redby SnailSploit claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md fil…