byomermaksutii· 35 skills
Stars
9
Category
Detect Solady SafeTransferLib calls that assume the token has code. SafeTransferLib.safeTransfer/safeTransferFrom/safeApprove deliberately skip the EXTCODESIZE check that OpenZeppelin's SafeERC20 performs, so a call to an EOA or a self-destructed/not-yet-deployed token address returns success with no transfer. Activate whenever code imports solady SafeTransferLib, calls safeTransfer/safeTransferFrom on a user-supplied or upgradeable token address, or routes arbitrary tokens.
$npx -y skills add omermaksutii/rugproof --skill solady-safetransferlib-no-contract-checkInstalls into the current project.
Run `npx skills use "https://github.com/omermaksutii/rugproof" --skill "omermaksutii/rugproof/solady-safetransferlib-no-contract-check"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/omermaksutii/rugproof" that are relevant to the current task. Run `npx skills add "https://github.com/omermaksutii/rugproof"` and select the relevant skills, then follow their instructions.