account-abstraction

Review StarkNet account abstraction validate/execute paths, nonces, and session policies.

Updated Apr 3, 2026
One-click install
npx skills add https://github.com/cartridge-gg/scoundrel --skill account-abstraction-cartridge-gg
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: account-abstraction
Source: https://github.com/cartridge-gg/scoundrel/tree/main/.agents/skills/account-abstraction
Command: npx skills add https://github.com/cartridge-gg/scoundrel --skill account-abstraction-cartridge-gg

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

StarkNet account abstraction correctness and security guidance for validate/execute paths, nonces, signatures, and session policies.

Core Features & Use Cases

  • Guidance on validating nonce semantics and signature handling.
  • Policy enforcement for session keys and privileged selectors.
  • Security-focused reviews and regression testing for StarkNet accounts.

Quick Start

Run a focused security review of the validate and execute paths and perform a final audit with a Cairo auditor.

Frequently Asked Questions about account-abstraction

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure StarkNet account abstraction validate and execute paths?

To secure StarkNet account abstraction, review the validate and execute paths for deterministic validation and bounded execution. This ensures authorization flows and signatures are protected against replay attacks and unauthorized access.

What is the best way to handle nonces and signatures in StarkNet smart contracts?

Handling nonces and signatures in StarkNet requires enforcing strict nonce semantics and robust signature validation. Properly managing these elements guarantees replay resistance and secure authorization across your smart contract execution flows.

How do I implement session keys and policy enforcement for StarkNet accounts?

Implementing session keys and policy enforcement involves defining privileged selectors and applying session policies to StarkNet accounts. This restricts access to specific actions, ensuring bounded execution and secure authorization within your session.

Can I use this approach for regression testing of StarkNet authorization flows?

Yes, you can use this approach for regression testing of StarkNet authorization flows. It provides clear verification steps to test replay protections, signature handling, and policy enforcement across smart contracts.

Why does my StarkNet account abstraction validation fail during security audits?

StarkNet account abstraction validation fails during security audits when it lacks deterministic validation or proper nonce handling. Reviewing the validate path ensures replay resistance and correct signature verification before execution.