variant_analysis

Name: variant_analysis
Availability: InStock
Author: MultiversX

Identifies and locates similar code patterns to detect duplicate defects across a repository.

12|5|Updated Jan 28, 2026

Search Tags:#security #vulnerability #code audit #grep #variant analysis #multiversx

Ready to run

npx skills add https://github.com/multiversx/mx-ai-skills --skill variant-analysis-multiversx

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: variant_analysis
Source: https://github.com/multiversx/mx-ai-skills/tree/main/antigravity/skills/variant_analysis
Command: npx skills add https://github.com/multiversx/mx-ai-skills --skill variant-analysis-multiversx

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps you multiply the value of a single security finding by automatically locating similar vulnerabilities across the entire codebase.

Core Features & Use Cases

Pattern Abstraction: Identifies the core pattern of a vulnerability beyond its specific instance.
Codebase-wide Search: Leverages tools like grep to find all occurrences of the abstracted pattern.
MultiversX Specific Variants: Includes common vulnerability patterns specific to the MultiversX ecosystem, such as missing payable checks, unbounded iterations on mappers, and async callback issues.
Automation Integration: Can create temporary Semgrep rules for automated detection of identified variants.

Quick Start

Use the variant analysis skill to find all instances of missing payable checks in the codebase.

Frequently Asked Questions about variant_analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I find variants of known security vulnerabilities in my codebase?▼

Variant analysis identifies and locates variants of known security vulnerabilities by abstracting vulnerability patterns and performing targeted searches across the codebase. This multiplies the value of a single security finding by automatically locating similar vulnerabilities.

What is the best way to search for missing payable checks in MultiversX smart contracts?▼

Performing a variant analysis is the best way to find missing payable checks in MultiversX smart contracts. The process abstracts the vulnerability pattern and leverages tools like grep to locate all occurrences of the issue across the codebase.

Can I use Semgrep to automate detection of vulnerability variants?▼

Yes, you can automate detection by creating temporary Semgrep rules based on abstracted vulnerability patterns. This integration facilitates automated detection of identified variants across the entire codebase.

How does variant analysis detect unbounded mapper iterations in MultiversX code?▼

Variant analysis detects unbounded mapper iterations by addressing common MultiversX-specific issues through pattern abstraction. It identifies the core pattern of the vulnerability beyond its specific instance and searches the codebase for matching occurrences.

Do I need a specific static analysis tool to perform a code audit for async callback reverts?▼

No specific tool is strictly required, as variant analysis can leverage tools like grep for codebase-wide search. However, integrating with static analysis tools like Semgrep facilitates automated detection of identified async callback revert variants.