plamentsv
- 160 skills
- 0 followers
- 1 day ago last updated
- ▌ Verification Protocol · plamentsv bundleHow to prove a hypothesis is TRUE or FALSE using Foundry tests.
- ▌ Account Validation · plamentsvTrigger Pattern Always required for Solana audits - Inject Into Breadth agents, depth agents
- ▌ Storage Lifecycle · plamentsvTrigger Pattern Always required for Soroban audits - Inject Into Breadth agents, depth agents
- ▌ Cid Capability Safety · plamentsvTrigger Pattern Always required for DAML audits - Inject Into Breadth agents, depth-external, depth-edge-case
- ▌ Flash Loan Interaction · plamentsvTrigger Pattern FLASH_LOAN flag (required) or BALANCE_DEPENDENT flag (optional complement) - Inject Into Breadth agents, depth-token-flow, depth-edge-case
- ▌ Staking Receipt Tokens · plamentsvType Thought-template (instantiate before use) - Research basis Donation attacks via unsolicited token transfers
- ▌ Dimensional Analysis · plamentsvTrigger MIXED_DECIMALS flag (mulDiv/mulWad/rayMul + mixed scale factors detected) - standalone niche agent, 1 budget slot
- ▌ Custom Type Safety · plamentsvTrigger Pattern contractimport! or contracttype detected - Inject Into Breadth agents, depth-external
- ▌ Sep41 Token Safety · plamentsvTrigger Pattern SEP-41 token patterns detected (approve/transfer/transfer_from/allowance/balance) - Inject Into Breadth agents, depth-token-flow, depth-edge-case
- ▌ Package Version Safety · plamentsvTrigger Pattern PACKAGE_UPGRADE flag (UpgradeCap detected, multiple package versions, upgrade policy references) - Inject Into Breadth agents, depth-external
- ▌ Vault Accounting · plamentsvProtocol Type Trigger vault (detected in recon TASK 0 Step 1) - Inject Into Core state agent OR economic design agent (merge via M4 hierarchy)
- ▌ Spec Compliance Audit · plamentsvTrigger HAS_DOCS flag in template_recommendations.md (recon detects non-empty DOCS_PATH - whitepaper, spec, or design doc provided) - Agent Type general-purpose (standalone nich...
- ▌ Stableswap Compliance · plamentsvTrigger STABLESWAP_FORK flag (fork-ancestry detects Curve/StableSwap parent via get_d/get_y/ramp_a/StableSwap patterns) - Agent Type general-purpose (standalone niche agent, 1 budget slot)
- ▌ Token 2022 Extensions · plamentsvTrigger Pattern TOKEN_2022 flag detected (token_2022/spl_token_2022/transfer_checked usage) - Inject Into Breadth agents, depth agents
- ▌
- ▌ Fungible Asset Security · plamentsvTrigger FA_STANDARD flag detected (protocol uses FungibleAsset standard) - Used by Breadth agents, depth-token-flow
- ▌ Share Allocation Fairness · plamentsvTrigger SHARE_ALLOCATION flag detected in pattern scan - Used by Breadth agents, depth-edge-case
- ▌ Outcome Determinism · plamentsvProtocol Type Trigger outcome_determinism - detected when EITHER of these code patterns are present - - Selection from finite depletable pool with fallback behavior (while(full)...
- ▌ Callback Receiver Safety · plamentsvNiche agent for callback receiver safety: access control on implemented callback handlers, permissionless state inflation via callbacks, and selective revert exploitation
- ▌ External Precondition Audit · plamentsvTrigger Pattern Any external contract interaction detected in attack_surface.md - Inject Into Breadth agents (merged via M7 hierarchy)
- ▌ Fork Choice Audit · plamentsvL1 trigger - audits fork-choice rule implementation (LMD-GHOST, Tendermint locking, Nakamoto longest-chain) for equivocation handling, slot-vs-block reasoning, duplicate block handling, and chain reorg correctness.
- ▌ Rpc Surface Audit · plamentsvL1 trigger - audits JSON-RPC and Engine API surfaces for authentication bypass, rate limiting, subscription buffer overflows, and method-specific DoS.
- ▌ Rust Unsafe Audit · plamentsvL1 supplement - audits Rust-specific hazards: unsafe blocks, uninitialized memory, Send/Sync violations, panic safety in hot paths, drop order, FFI.
- ▌ Semantic Gap Investigator · plamentsvTrigger Semantic Invariant Agent (Phase 4a.5) reports sync_gaps = 1 OR accumulation_exposures = 1 OR conditional_writes = 1 OR cluster_gaps = 1 in its return message - Agent Typ...
- ▌ Contract Upgradeability · plamentsvTrigger Pattern update_current_contract_wasm detected in codebase - Inject Into Breadth agents, depth-state-trace
- ▌ Move Safety Core Directives · plamentsvLightweight core directives for Sui Move always-required skills - injected into every breadth agent. Full methodology lives in the dedicated Move-Safety Agent.
- ▌ Temporal Parameter Staleness · plamentsvType Thought-template (instantiate before use) - Research basis Cached parameters in multi-step operations become stale when governance changes them mid-operation
- ▌ Config Correctness · plamentsvL1 trigger - audits configuration constants, documented bounds, feature-gated values, and unused protocol limits for semantic drift.
- ▌ State Sync Pruning · plamentsvL1 trigger - audits state sync, snapshot integrity, checkpoint trust, pruning race conditions, and state growth attacks.
- ▌ Nft Protocol Security · plamentsvProtocol Type Trigger nft (detected when ERC721/ERC1155 with marketplace, minting, staking, or collateral logic found) - Inject Into Breadth agents, depth-token-flow, depth-edge...
- ▌ Semantic Consistency Audit · plamentsvTrigger HAS_MULTI_CONTRACT flag in template_recommendations.md (recon detects 2+ in-scope contracts/modules sharing parameters or formulas) - Agent Type general-purpose (standal...
- ▌ Instruction Introspection · plamentsvTrigger Pattern INSTRUCTION_INTROSPECTION flag detected (load_instruction_at/Sysvar1nstructions) - Inject Into Breadth agents, depth agents
- ▌ Cross Chain Message Integrity · plamentsvType Thought-template (instantiate before use) - Trigger Pattern CROSS_CHAIN_MSG flag detected (protocol RECEIVES cross-chain messages)
- ▌ Cosmos Ibc Security · plamentsvL1 trigger - audits IBC / ibc-go cross-chain entry points for ICS-23 / Merkle proof gaps, ordered-channel sequence integrity, escrow burn<->mint synchronization, light-client version downgrade, and timeout/ack handler reentrancy.
- ▌ P2p Dos And Eclipse · plamentsvL1 trigger - audits peer-to-peer networking for DoS vectors (resource exhaustion, amplification), eclipse attack susceptibility, and discovery table poisoning (Kademlia/devp2p).
- ▌ Multi Step Operation Safety · plamentsvNiche agent for multi-step operation safety: authorization sequence conflicts in batch/multi-step operations, and infrastructure address targeting via public on-behalf-of functions
- ▌ Signature Verification Audit · plamentsvTrigger HAS_SIGNATURES flag in template_recommendations.md (recon detects signature verification patterns - see chain-specific grep patterns in TASK 6) - Agent Type general-purp...
- ▌ Dex Integration Security · plamentsvProtocol Type Trigger dex_integration (detected when recon finds swap|addLiquidity|removeLiquidity|IUniswapV2Router|ISwapRouter|amountOutMin|amountOutMinimum|slippage - AND the...
- ▌ Bls Aggregation Audit · plamentsvL1 trigger - audits BLS signature aggregation: subgroup check, rogue-key attack defense, aggregation order, signing-domain separation.
- ▌ Go Concurrency Safety · plamentsvL1 supplement - audits Go-specific concurrency hazards in node client code: map iteration non-determinism, goroutine leaks, mutex ordering, panic boundaries, context cancellation.
- ▌ Governance Attack Vectors · plamentsvProtocol Type Trigger governance (detected when Governor, Timelock, voting, proposal, quorum, delegate patterns found) - Inject Into Breadth agents, depth-external, depth-edge-case
- ▌ Mempool Asymmetric Dos · plamentsvL1 trigger - audits mempool / transaction pool for eviction asymmetries, replacement policy abuse, blob-pool exhaustion, and DETER-class denial of service.
- ▌ Write Error Divergence · plamentsvL1 trigger - audits file/database write paths for metadata commits, cache updates, and success returns that diverge when writes fail.
- ▌ Lending Protocol Security · plamentsvProtocol Type Trigger lending (detected when recon finds liquidate|borrow|repay|collateral|lend|loan|LTV|healthFactor|interestRate|debtToken) - Inject Into Breadth agents, depth...
- ▌ Gossip Cache Invariance · plamentsvL1 trigger - audits message and seen caches for write-after-validate ordering, eviction safety, and duplicate handling.
- ▌ Integration Hazard Research · plamentsvProtocol Type Trigger NAMED_EXTERNAL_PROTOCOL (detected when recon finds import/interface for an identifiable external protocol — not standard libraries). Researches known integration hazards of the target protocol.
- ▌ Cosmos Sdk Module Safety · plamentsvL1 trigger - audits Cosmos-SDK / CometBFT modules for consensus non-determinism, unmetered ABCI hooks, signer/state mismatches, module-account bookkeeping breaks, sdk.Dec rounding, ABCI-path panics, unregistered Msg handlers, and fee/gas overflow.
- ▌ Peer Scoring Correctness · plamentsvL1 trigger - audits peer reputation and scoring logic for symmetry, farming resistance, and penalty coverage.
- ▌ Account Abstraction Security · plamentsvProtocol Type Trigger account_abstraction (detected when ERC-4337 interfaces, EntryPoint, UserOperation, or Paymaster patterns found) - Inject Into Breadth agents, depth-external
- ▌ Consensus Math Correctness · plamentsvL1 trigger - audits consensus arithmetic for truncation, unused bounds, EMA direction, and threshold edge errors.
- ▌ Execution Client Hardening · plamentsvL1 trigger - audits execution engine (EVM interpreter, WASM, SVM) for memory corruption, gas mispricing (EXTCODESIZE class), opcode semantics, and VM invariant breaks.
- ▌ Consensus Safety Invariants · plamentsvL1 trigger - detects non-determinism, state transition completeness violations, and safety/liveness invariant breaks in consensus code. Inject into depth-consensus-invariant or depth-state-trace.
- ▌ Dependency Audit Nodeclient · plamentsvL1 supplement - audits Go modules and Rust crates for known vulnerabilities, outdated versions, supply chain risks, and replace/patch directives.
- ▌ Data Availability Enforcement · plamentsvL1 supplement - audits storage / data-availability chains (Arweave / Celestia-class) for unenforced data commitments: producer commits to data inclusion but the validator never verifies the data was actually published / gossiped / sampled.
- ▌
- ▌ Light Client Proof Verification · plamentsvL1 trigger - audits light client and cross-chain proof verification: Merkle proof soundness, ICS-23 subkey handling (Dragonberry class), state root checks, message integrity.
- ▌ Consensus Tx Identity Invariants · plamentsvL1 trigger - audits replay protection, transaction identity binding, and cross-layer uniqueness.
- ▌ Cross Environment Semantic Drift · plamentsvL1 trigger - audits L1/L2 boundary bugs, precompile context assumptions, integer width mismatches at environment boundaries, and EVM-on-non-EVM drift.
- ▌ Validator Lifecycle And Slashing · plamentsvL1 trigger - audits validator entry/exit transitions, slashing correctness, leader-duplicate handling, and lifecycle state invariants for PoS / DPoS / BFT consensus clients.
- ▌ Hardfork Activation And Protocol Upgrade · plamentsvL1 trigger - audits bugs that surface only at fork boundaries / protocol upgrade points: activation logic, dormant code paths, upgrade epoch correctness, version gating.