고급 스마트 계약 보안 감사를위한 AI 에이전트 기술. 이 기술은 AI 에이전트 (Claude, Cursor) QuillShield 방법론을 가르치고 전통적인 정적 분석 도구가 놓는 취약점을 검출합니다.

빠른 시작

• **Claude : ** Claude 플러그인으로이 재포를 설치하십시오. 시장은 .claude-plugin/marketplace.json]에서 정의됩니다. 감사에 필요한 플러그인을 사용. -Cursor: 감사할 때 기술 참조 — e.g. @plugins/reentrancy-pattern-analysis/skills/reentrancy-pattern-analysis/SKILL.md - 또는 플러그인 복사 skills/] 귀하의 커서 기술 디렉토리에 폴더.
• ** 적절한 기술을 사용하십시오 :** 아래 표와 각 플러그인을 사용할 때 Skills Overview를 참조하십시오.

기술 개요

##1. Behavioral 상태 분석 (BSA) : plugins/behavioral-state-analysis/

종합 감사 방법론. PoC 생성, Bayesian 신뢰 득점을 가진 행동 의도적인 적출, 다차원 위협 모델링 (경제, 접근 제한, 국가 무결성), Adversarial 시뮬레이션을 결합하십시오.

사용시: 완전한 스마트 계약 보안 감사를 시작, DeFi 프로토콜 모델링 위협, 또는 악용 증명을 생성.

# # # # 2.

QuillShield Security Skills

AI agent skills for advanced smart contract security auditing. These skills teach AI agents (Claude, Cursor) the QuillShield methodology for detecting vulnerabilities that traditional static analysis tools miss.

Quick start

• Claude: Install this repo as a Claude plugin; the marketplace is defined in .claude-plugin/marketplace.json. Enable the plugins you need for your audit.
• Cursor: Reference a skill when auditing — e.g. @plugins/reentrancy-pattern-analysis/skills/reentrancy-pattern-analysis/SKILL.md — or copy plugin skills/ folders into your Cursor skills directory.
• Use the right skill: See the table below and the Skills Overview for when to use each plugin.

Skills Overview

1. Behavioral State Analysis (BSA)

Plugin: plugins/behavioral-state-analysis/

The comprehensive audit methodology. Combines behavioral intent extraction, multi-dimensional threat modeling (economic, access control, state integrity), adversarial simulation with PoC generation, and Bayesian confidence scoring.

Use when: Starting a full smart contract security audit, threat modeling DeFi protocols, or generating exploit proof-of-concepts.

2. Semantic Guard Analysis

Plugin: plugins/semantic-guard-analysis/

Detects logic vulnerabilities by finding functions that bypass security checks (require statements, modifiers) that the contract’s own code consistently applies elsewhere. Based on the Consistency Principle: “A smart contract is its own specification.”

Use when: Looking for missing access controls, forgotten pause checks, inconsistent modifiers, or logic bugs invisible to pattern-matching tools.

3. State Invariant Detection

Plugin: plugins/state-invariant-detection/

Automatically infers mathematical relationships between state variables (sum, conservation, ratio, monotonic, synchronization) then finds functions that violate them. Catches the vulnerabilities behind the biggest DeFi hacks.

Use when: Auditing for supply/balance mismatches, broken tokenomics, accounting desynchronization, or conservation law violations.

4. Reentrancy Pattern Analysis

Plugin: plugins/reentrancy-pattern-analysis/

Systematically detects all reentrancy variants — classic, cross-function, cross-contract, read-only, and ERC-777/ERC-1155 callback reentrancy. Builds call graphs, verifies CEI pattern compliance, and traces state changes relative to external call positions.

Use when: Auditing contracts with external calls, ETH transfers, token interactions, or multi-contract architectures. Covers the most infamous smart contract vulnerability class.

5. Oracle & Flash Loan Analysis

Plugin: plugins/oracle-flashloan-analysis/