reentrancy-pattern-analysis

Detect reentrancy vulnerability variants in smart contracts via call graphs and CEI checks.

1|Updated Feb 17, 2026
One-click install
npx skills add https://github.com/Ramprasad4121/srp --skill reentrancy-pattern-analysis
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: reentrancy-pattern-analysis
Source: https://github.com/Ramprasad4121/srp/tree/main/skills-repos/quillai/plugins/reentrancy-pattern-analysis/skills/reentrancy-pattern-analysis
Command: npx skills add https://github.com/Ramprasad4121/srp --skill reentrancy-pattern-analysis

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill systematically detects all variants of reentrancy vulnerabilities in smart contracts, ensuring robust security by mapping external calls to state changes.

Core Features & Use Cases

  • Comprehensive Reentrancy Detection: Identifies classic, cross-function, cross-contract, read-only, and callback-based reentrancy.
  • CEI Pattern Verification: Analyzes compliance with the Checks-Effects-Interactions pattern.
  • Use Case: When auditing a DeFi protocol that handles token transfers and interacts with multiple other contracts, this Skill is crucial for identifying subtle reentrancy risks that traditional tools might miss.

Quick Start

Analyze the provided smart contract code for reentrancy vulnerabilities.

Frequently Asked Questions about reentrancy-pattern-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect reentrancy vulnerabilities in Solidity smart contracts?

Detect reentrancy vulnerabilities by analyzing Solidity code to map external calls to state changes, verifying Checks-Effects-Interactions pattern compliance, and tracing callback vectors through ERC-777 and ERC-1155 hooks.

What is cross-function and cross-contract reentrancy in DeFi security audits?

Cross-function and cross-contract reentrancy occur when external calls trigger state modifications across multiple functions or protocols. Auditing builds call graphs to trace these state changes relative to external calls in multi-contract architectures.

How do I check if my smart contract follows the Checks-Effects-Interactions pattern?

Check Checks-Effects-Interactions pattern compliance by tracing state changes relative to external calls within the smart contract. The analysis verifies that all state modifications occur before external interactions to prevent reentrancy exploits.

Does ERC-777 or ERC-1155 token transfer trigger reentrancy risks during smart contract auditing?

ERC-777 and ERC-1155 transfers trigger reentrancy risks through callback hooks. Smart contract auditing identifies these callback vectors by mapping external token transfers to subsequent state changes and verifying protection mechanisms.

What is the best way to audit complex DeFi protocols for read-only reentrancy?

The best way to audit DeFi protocols for read-only reentrancy is systematically detecting all vulnerability variants by building call graphs and tracing state changes relative to external calls across the entire multi-contract architecture.

Why does traditional vulnerability detection miss subtle reentrancy risks in smart contracts?

Traditional vulnerability detection misses subtle reentrancy risks because it often fails to map external calls to state changes across complex multi-contract architectures or identify callback vectors enabled by ERC-777 and ERC-1155 token standards.