governance-attack-vectors

Identify and analyze governance attack vectors in EVM-based smart contract systems.

276|56|Updated Mar 16, 2026
One-click install
npx skills add https://github.com/PlamenTSV/plamen --skill governance-attack-vectors
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: governance-attack-vectors
Source: https://github.com/PlamenTSV/plamen/tree/main/agents/skills/injectable/governance-attack-vectors
Command: npx skills add https://github.com/PlamenTSV/plamen --skill governance-attack-vectors

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security teams need to identify and analyze governance-related attack patterns in on-chain protocols, focusing on vote power sources, proposal lifecycles, and delegation dynamics.

Core Features & Use Cases

  • Detect governance patterns (Governor, Timelock, voting) and map potential attack vectors across depth-external, depth-state-trace, and depth-edge-case domains.
  • Decompose findings into actionable investigation questions for auditors and developers.
  • Apply to EVM-based governance systems across protocols to strengthen audits and security reviews.

Quick Start

Run the governance-attack-vectors skill against a target governance contract to produce an investigation plan.

Frequently Asked Questions about governance-attack-vectors

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect governance attack vectors in EVM smart contracts?

Detect governance attack vectors in EVM smart contracts by performing static analysis of Governor and Timelock contracts to map vote power sources, proposal lifecycles, and delegation patterns. This identifies vulnerabilities and generates an actionable investigation plan for auditors.

What are common delegation attack vectors in on-chain governance systems?

Common delegation attack vectors in on-chain governance systems involve exploiting vote power concentration and proposal lifecycle dynamics. Analyzing Governor contracts helps identify these delegation pattern exploits across depth-edge-case domains during security reviews.

How do I audit a Timelock and Governor contract for proposal lifecycle vulnerabilities?

Audit a Timelock and Governor contract for proposal lifecycle vulnerabilities by applying pattern-matching for common attack vectors and structured prompts to guide depth-state-trace investigations. This decomposes findings into actionable investigation questions for developers.

Does this governance security analysis work with any EVM-based protocol?

Yes, this governance security analysis works with EVM-based governance systems across protocols featuring on-chain proposals, voting, and Timelock mechanisms. It applies pattern-matching to detect and harden governance exploits in audits and security reviews.

What's the best way to analyze quorum dynamics during a governance smart contract audit?

The best way to analyze quorum dynamics during a governance smart contract audit is to run structured prompts against target contracts to map vote power sources and proposal states. This yields actionable hardening insights for EVM protocols.