account-abstraction-security

Detect ERC-4337 patterns and inject guided security inquiries into external agents.

276|56|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/PlamenTSV/plamen --skill account-abstraction-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: account-abstraction-security
Source: https://github.com/PlamenTSV/plamen/tree/main/agents/skills/injectable/account-abstraction-security
Command: npx skills add https://github.com/PlamenTSV/plamen --skill account-abstraction-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Recon detects and analyzes protocol-type triggers for account abstraction (ERC-4337) and guides security auditing by injecting targeted prompts into breadth and depth-external agents.

Core Features & Use Cases

  • Detects ERC-4337 pattern signals: UserOperation, IAccount, IPaymaster, EntryPoint, and related validation flows.
  • Guides depth-external assessment across validation, paymaster interactions, and factory initialization risks.
  • Enables structured, domain-driven questions to support end-to-end security reviews in EVM-based environments.

Quick Start

Deploy the skill in your audit pipeline to detect ERC-4337 patterns and guide breadth and depth-external agents through account-abstraction security analysis.

Frequently Asked Questions about account-abstraction-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit ERC-4337 account abstraction validation flows?▼

To audit ERC-4337 account abstraction validation flows, inject guided domain questions into breadth and depth-external agents to dissect validateUserOp, nonce handling, and signature validation modules across EVM-based chains.

What security checks are needed for ERC-4337 paymaster interactions?▼

Security checks for ERC-4337 paymaster interactions require tracing validatePaymasterUserOp and postOp execution to identify protocol-type trigger risks and ensure safe factory initialization across EVM environments.

How does account abstraction security analysis handle EntryPoint and UserOperation patterns?▼

Account abstraction security analysis detects EntryPoint and UserOperation patterns to apply structured prompts that guide end-to-end security reviews of IAccount implementations and wallet factory flows.

Can I use this approach for smart contract wallet security on any EVM-based chain?▼

Yes, you can use this approach for smart contract wallet security on any EVM-based chain, as it applies ERC-4337 pattern detection across various protocol-type triggers and validation flows.

What is the best way to trace isValidSignature risks in account abstraction protocols?▼

The best way to trace isValidSignature risks is to deploy guided inquiries that support depth-external assessment of signature validation modules within the broader ERC-4337 flow.

Why do I need structured prompts for wallet factory initialization safety checks?▼

Structured prompts are needed for wallet factory initialization safety checks to systematically satisfy security review requirements and detect protocol-type triggers during deployment on EVM chains.