unsecure-signatures

Community

Secure your smart contracts from signature exploits.

AuthorApegurus
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill identifies and helps remediate critical vulnerabilities in smart contracts that rely on ECDSA signatures for authorization or verification, preventing exploits like replay attacks and unauthorized access.

Core Features & Use Cases

  • Signature Vulnerability Detection: Analyzes contracts for common pitfalls in ECDSA signature handling.
  • Replay Protection Check: Verifies the inclusion of nonces, chainIds, and contract addresses in signed messages.
  • Malleability & Null Address Checks: Detects issues with signature malleability and unchecked ecrecover return values.
  • Use Case: A developer can use this Skill to audit a new DeFi protocol's signature verification logic, ensuring that users cannot be exploited through replay attacks or by forging signatures.

Quick Start

Audit the attached contract file 'VaultContract.sol' for unsecure signature vulnerabilities.

Dependency Matrix

Required Modules

None required

Components

references

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: unsecure-signatures
Download link: https://github.com/Apegurus/solidity-argus/archive/main.zip#unsecure-signatures

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.