人工智能代理技能用于高级智能合约安全审计。这些技能教导人工智能代理（Claude、Cursor）QuillShield方法，用于检测传统静态分析工具忽略的漏洞。

快速开始

• Claude： 将此仓库安装为 Claude 插件;市场定义在 .claude-plugin/marketplace.json 中。启用您审计所需的插件。
• 光标： 审计时引用技能——例如@plugins/reentrancy-pattern-analysis/skills/reentrancy-pattern-analysis/SKILL.md——或将插件skills/文件夹复制到你的光标技能目录中。
• 使用正确的技能： 请参阅下表及技能概览，了解使用每个插件的时间。

技能概述

1.行为状态分析（BSA）

插件： plugins/behavioral-state-analysis/

综合审计方法论。结合行为意图提取、多维威胁建模（经济学、访问控制、状态完整性）、带有PoC生成的对抗性模拟以及贝叶斯信心评分。

** 使用时间：** 启动全面的智能合约安全审计、对 DeFi 协议进行威胁建模，或生成漏洞利用概念验证。

2.

QuillShield Security Skills

AI agent skills for advanced smart contract security auditing. These skills teach AI agents (Claude, Cursor) the QuillShield methodology for detecting vulnerabilities that traditional static analysis tools miss.

Quick start

• Claude: Install this repo as a Claude plugin; the marketplace is defined in .claude-plugin/marketplace.json. Enable the plugins you need for your audit.
• Cursor: Reference a skill when auditing — e.g. @plugins/reentrancy-pattern-analysis/skills/reentrancy-pattern-analysis/SKILL.md — or copy plugin skills/ folders into your Cursor skills directory.
• Use the right skill: See the table below and the Skills Overview for when to use each plugin.

Skills Overview

1. Behavioral State Analysis (BSA)

Plugin: plugins/behavioral-state-analysis/

The comprehensive audit methodology. Combines behavioral intent extraction, multi-dimensional threat modeling (economic, access control, state integrity), adversarial simulation with PoC generation, and Bayesian confidence scoring.

Use when: Starting a full smart contract security audit, threat modeling DeFi protocols, or generating exploit proof-of-concepts.

2. Semantic Guard Analysis

Plugin: plugins/semantic-guard-analysis/

Detects logic vulnerabilities by finding functions that bypass security checks (require statements, modifiers) that the contract’s own code consistently applies elsewhere. Based on the Consistency Principle: “A smart contract is its own specification.”

Use when: Looking for missing access controls, forgotten pause checks, inconsistent modifiers, or logic bugs invisible to pattern-matching tools.

3. State Invariant Detection

Plugin: plugins/state-invariant-detection/

Automatically infers mathematical relationships between state variables (sum, conservation, ratio, monotonic, synchronization) then finds functions that violate them. Catches the vulnerabilities behind the biggest DeFi hacks.

Use when: Auditing for supply/balance mismatches, broken tokenomics, accounting desynchronization, or conservation law violations.

4. Reentrancy Pattern Analysis

Plugin: plugins/reentrancy-pattern-analysis/

Systematically detects all reentrancy variants — classic, cross-function, cross-contract, read-only, and ERC-777/ERC-1155 callback reentrancy. Builds call graphs, verifies CEI pattern compliance, and traces state changes relative to external call positions.

Use when: Auditing contracts with external calls, ETH transfers, token interactions, or multi-contract architectures. Covers the most infamous smart contract vulnerability class.

5. Oracle & Flash Loan Analysis

Plugin: plugins/oracle-flashloan-analysis/