account-abstraction-security

Detect ERC-4337 patterns and inject guided security inquiries into external agents.

276|56|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/PlamenTSV/plamen --skill account-abstraction-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: account-abstraction-security
Source: https://github.com/PlamenTSV/plamen/tree/main/agents/skills/injectable/account-abstraction-security
Command: npx skills add https://github.com/PlamenTSV/plamen --skill account-abstraction-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Recon detects and analyzes protocol-type triggers for account abstraction (ERC-4337) and guides security auditing by injecting targeted prompts into breadth and depth-external agents.

Core Features & Use Cases

  • Detects ERC-4337 pattern signals: UserOperation, IAccount, IPaymaster, EntryPoint, and related validation flows.
  • Guides depth-external assessment across validation, paymaster interactions, and factory initialization risks.
  • Enables structured, domain-driven questions to support end-to-end security reviews in EVM-based environments.

Quick Start

Deploy the skill in your audit pipeline to detect ERC-4337 patterns and guide breadth and depth-external agents through account-abstraction security analysis.

Frequently Asked Questions about account-abstraction-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit ERC-4337 account abstraction validation flows?

To audit ERC-4337 account abstraction validation flows, inject guided domain questions into breadth and depth-external agents to dissect validateUserOp, nonce handling, and signature validation modules across EVM-based chains.

What security checks are needed for ERC-4337 paymaster interactions?

Security checks for ERC-4337 paymaster interactions require tracing validatePaymasterUserOp and postOp execution to identify protocol-type trigger risks and ensure safe factory initialization across EVM environments.

How does account abstraction security analysis handle EntryPoint and UserOperation patterns?

Account abstraction security analysis detects EntryPoint and UserOperation patterns to apply structured prompts that guide end-to-end security reviews of IAccount implementations and wallet factory flows.

Can I use this approach for smart contract wallet security on any EVM-based chain?

Yes, you can use this approach for smart contract wallet security on any EVM-based chain, as it applies ERC-4337 pattern detection across various protocol-type triggers and validation flows.

What is the best way to trace isValidSignature risks in account abstraction protocols?

The best way to trace isValidSignature risks is to deploy guided inquiries that support depth-external assessment of signature validation modules within the broader ERC-4337 flow.

Why do I need structured prompts for wallet factory initialization safety checks?

Structured prompts are needed for wallet factory initialization safety checks to systematically satisfy security review requirements and detect protocol-type triggers during deployment on EVM chains.