asset-flow-analysis

Analyze Solidity smart contracts to map asset storage and movement paths.

60|18|Updated Jan 21, 2026
One-click install
npx skills add https://github.com/PurpleAILAB/Vigilo --skill asset-flow-analysis
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: asset-flow-analysis
Source: https://github.com/PurpleAILAB/Vigilo/tree/main/packages/claude/skills/protocol-analysis/asset-flow-analysis
Command: npx skills add https://github.com/PurpleAILAB/Vigilo --skill asset-flow-analysis

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need to understand how funds move within a smart contract protocol, identifying all storage locations, transfer paths, and potential points of financial leakage.

Core Features & Use Cases

  • Asset Mapping: Identifies and tracks all forms of assets (ETH, ERC20, LP tokens) held by the protocol.
  • Flow Analysis: Visualizes and analyzes deposit, withdrawal, and internal transfer paths.
  • Leakage Identification: Pinpoints vulnerabilities like unvalidated withdrawals, calculation errors, and economic attack vectors.
  • Use Case: An auditor can use this Skill to quickly generate a comprehensive map of a DeFi protocol's treasury, understand how user deposits are managed, and identify any functions that could be exploited to drain funds.

Quick Start

Analyze the asset flow for the provided smart contract code.

Frequently Asked Questions about asset-flow-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I map asset flow and find leakage points in Solidity smart contracts?

To map asset flow in Solidity smart contracts, you analyze the code to identify storage locations, transfer paths, and potential leakage points. This process tracks how ETH, ERC20, and LP tokens are held, moved internally, and withdrawn.

What is smart contract asset flow analysis for DeFi security audits?

Smart contract asset flow analysis for DeFi security audits is the systematic tracking of protocol funds to identify deposit, withdrawal, and internal transfer paths. It pinpoints vulnerabilities like unvalidated withdrawals and calculation errors that could drain funds.

How to identify unvalidated withdrawals and economic attack vectors in DeFi protocols?

You identify unvalidated withdrawals and economic attack vectors by analyzing Solidity code for specific patterns related to asset handling and function calls. This maps how user deposits are managed and highlights functions exploitable to drain funds.

Can I track internal transfers of ETH and ERC20 tokens for vulnerability analysis?

Yes, you can track internal transfers of ETH and ERC20 tokens for vulnerability analysis. The process visualizes and analyzes how assets move within the protocol, identifying all storage locations and transfer paths to ensure protocol finances are secure.

Does this asset flow analysis work with any Solidity code or only specific DeFi patterns?

This asset flow analysis requires analysis of Solidity code for specific patterns related to asset handling and function calls. It is designed to map protocol assets and financial movement paths within DeFi architectures.

What are the limitations of mapping protocol assets using smart contract code analysis?

The limitation of mapping protocol assets using smart contract code analysis is that it strictly requires Solidity code to identify asset storage and movement paths. It focuses on financial leakage points and may not detect non-asset-related logic flaws.