What problem does it solve? Smart contract audits often miss input validation flaws—missing zero-address checks, unbounded fee setters, array length mismatches—which account for over a third of real-world vulnerabilities and hundreds of millions in losses. This Skill gives auditors a systematic detection framework so these bugs are found before attackers exploit them. ## Core Features & Use Cases - Seven Detection Patterns: Covers missing zero-address checks, unbounded parameters, array length mismatches, zero-amount handling, dangerous selectors/calldata, contract-vs-EOA confusion, and missing deadline validation. - Input Validation Matrix: Produces a structured artifact mapping every external function parameter to its expected range, actual check, and identified gap. - Search Query Recipes: Provides ready-to-use Grep patterns to locate vulnerable code across Solidity codebases, plus severity classification and a rationalization table to counter common developer excuses. - Use Case: During a DeFi protocol audit, run the detection patterns against the codebase to find that setFee has no maximum bound and batchTransfer never checks that array lengths match, then document both in the validation matrix with severity ratings. ## Quick Start Ask the logic-auditor agent to run the input-validation analysis on your Solidity contracts and produce an Input Validation Matrix for all external functions.
