Entry Point Analyzer
alt-research2/SolidityGuard
Analyzes Solidity contract entry points to map attack surface.
A skill your agent uses when building with EIP-7702 account abstraction.
$ npx skills add ccashwell/evm-cortex --skill erc7702-patterns -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install ccashwell/evm-cortex erc7702-patterns --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/ccashwell/evm-cortex.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/erc7702-patterns .claude/skills/erc7702-patterns && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "erc7702-patterns" agent skill from https://github.com/ccashwell/evm-cortex/tree/main/skills/erc7702-patterns into .claude/skills/erc7702-patterns/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "erc7702-patterns", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/ccashwell/evm-cortex/tree/main/skills/erc7702-patternsType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add ccashwell/evm-cortex --skill erc7702-patterns -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install ccashwell/evm-cortex erc7702-patterns --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/ccashwell/evm-cortex.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/erc7702-patterns .agents/skills/erc7702-patterns && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "erc7702-patterns" agent skill from https://github.com/ccashwell/evm-cortex/tree/main/skills/erc7702-patterns into .agents/skills/erc7702-patterns/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "erc7702-patterns", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add ccashwell/evm-cortex --skill erc7702-patterns -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install ccashwell/evm-cortex erc7702-patterns --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/ccashwell/evm-cortex.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/erc7702-patterns .cursor/skills/erc7702-patterns && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "erc7702-patterns" agent skill from https://github.com/ccashwell/evm-cortex/tree/main/skills/erc7702-patterns into .cursor/skills/erc7702-patterns/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "erc7702-patterns", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/ccashwell/evm-cortex.git --path skills/erc7702-patterns--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add ccashwell/evm-cortex --skill erc7702-patterns -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install ccashwell/evm-cortex erc7702-patterns --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/ccashwell/evm-cortex.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/erc7702-patterns .gemini/skills/erc7702-patterns && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "erc7702-patterns" agent skill from https://github.com/ccashwell/evm-cortex/tree/main/skills/erc7702-patterns into .gemini/skills/erc7702-patterns/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "erc7702-patterns", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install ccashwell/evm-cortex erc7702-patternsInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add ccashwell/evm-cortex --skill erc7702-patterns -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/ccashwell/evm-cortex.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/erc7702-patterns .github/skills/erc7702-patterns && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "erc7702-patterns" agent skill from https://github.com/ccashwell/evm-cortex/tree/main/skills/erc7702-patterns into .github/skills/erc7702-patterns/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "erc7702-patterns", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add ccashwell/evm-cortex --skill erc7702-patterns -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install ccashwell/evm-cortex erc7702-patterns --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/ccashwell/evm-cortex.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/erc7702-patterns .opencode/skills/erc7702-patterns && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "erc7702-patterns" agent skill from https://github.com/ccashwell/evm-cortex/tree/main/skills/erc7702-patterns into .opencode/skills/erc7702-patterns/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "erc7702-patterns", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
erc7702-patternsA skill your agent uses when building with EIP-7702 account abstraction.
Erc7702 Patterns is an agent skill from ccashwell/evm-cortex. Use when building with EIP-7702 account abstraction. Covers EOA smart contract delegation, authorization tuples, transaction batching, sponsored transactions, session keys, and dApp integration. Live since Pectra (May 2025).
Its SKILL.md is about 1.7k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Backend & APIs, covering Smart contracts and Authorization and RBAC. The repository describes itself as: Ethereum protocol engineering squad for AI coding assistants. The licence is MIT.
Read from SKILL.md and the folder at commit f8f3301. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
No scripts in the folder and no shell commands in SKILL.md (its code samples are solidity and typescript).
From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Erc7702 Patterns loads about 1.7k tokens when it runs. Until then it costs about 60 tokens; SKILL.md has 259 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from ccashwell/evm-cortex at commit f8f3301, republished under its MIT licence (© ccashwell). 259 words, ~1,683 tokens.
.claude/skills/erc7702-patterns/SKILL.md (or your agent's skills folder).EIP-7702 (shipped with Pectra, May 2025) lets EOAs temporarily delegate to smart contract code. The EOA's address gains smart contract capabilities without deploying a new account. Unlike EIP-4337, there's no separate EntryPoint or bundler infrastructure.
A new transaction type (0x04) includes authorization tuples that set the EOA's code to point at a delegation contract:
authorization_list: [{ chain_id, address, nonce, y_parity, r, s }]When the tx executes, the EOA's code is set to 0xef0100 || address (a delegation designator pointing to the implementation contract). All calls to the EOA now execute the implementation's code in the EOA's context.
struct Authorization {
uint256 chainId; // 0 = valid on any chain
address delegate; // implementation contract
uint64 nonce; // EOA's current nonce
uint8 yParity;
bytes32 r;
bytes32 s;
}Sign offchain with the EOA's private key:
import { createWalletClient, http, parseEther } from 'viem';
import { mainnet } from 'viem/chains';
import { privateKeyToAccount } from 'viem/accounts';
import { eip7702Actions } from 'viem/experimental';
const account = privateKeyToAccount('0x...');
const client = createWalletClient({
account,
chain: mainnet,
transport: http(),
}).extend(eip7702Actions());
const authorization = await client.signAuthorization({
contractAddress: '0xDelegateContract...',
});
const hash = await client.sendTransaction({
authorizationList: [authorization],
to: account.address,
data: encodeFunctionData({ ... }),
});// SPDX-License-Identifier: MIT
pragma solidity ^0.8.27;
contract SmartAccount {
struct Call {
address target;
uint256 value;
bytes data;
}
/// @notice Execute a batch of calls from the delegating EOA.
/// Only the EOA itself can invoke (msg.sender == address(this)).
function execute(Call[] calldata calls) external payable {
require(msg.sender == address(this), "Only self");
for (uint256 i = 0; i < calls.length; i++) {
(bool ok, bytes memory ret) = calls[i].target.call{value: calls[i].value}(calls[i].data);
require(ok, string(ret));
}
}
}Users can batch multiple actions into one transaction:
const calls = [
{ target: tokenAddress, value: 0n, data: approveCalldata },
{ target: routerAddress, value: 0n, data: swapCalldata },
{ target: stakingAddress, value: 0n, data: stakeCalldata },
];
const hash = await client.sendTransaction({
authorizationList: [authorization],
to: account.address,
data: encodeFunctionData({
abi: smartAccountAbi,
functionName: 'execute',
args: [calls],
}),
});A relayer can submit a 7702 tx on behalf of the user. The user signs the authorization, the relayer pays gas:
contract SponsoredAccount {
mapping(address => bool) public sponsors;
function executeSponsored(
Call[] calldata calls,
address sponsor,
bytes calldata sponsorSig
) external {
require(sponsors[sponsor] || msg.sender == address(this), "Unauthorized");
for (uint256 i = 0; i < calls.length; i++) {
(bool ok,) = calls[i].target.call{value: calls[i].value}(calls[i].data);
require(ok, "Call failed");
}
}
}Delegate limited permissions to a session key for a period:
contract SessionKeyAccount {
struct SessionKey {
address key;
uint48 validAfter;
uint48 validUntil;
address[] allowedTargets;
}
mapping(bytes32 => bool) public sessionKeys;
function addSessionKey(SessionKey calldata sk) external {
require(msg.sender == address(this), "Only self");
sessionKeys[keccak256(abi.encode(sk))] = true;
}
function executeWithSessionKey(
Call[] calldata calls,
SessionKey calldata sk,
bytes calldata signature
) external {
require(sessionKeys[keccak256(abi.encode(sk))], "Unknown key");
require(block.timestamp >= sk.validAfter, "Too early");
require(block.timestamp <= sk.validUntil, "Expired");
bytes32 digest = keccak256(abi.encode(calls, sk));
require(ECDSA.recover(digest, signature) == sk.key, "Bad sig");
for (uint256 i = 0; i < calls.length; i++) {
_validateTarget(calls[i].target, sk.allowedTargets);
(bool ok,) = calls[i].target.call{value: calls[i].value}(calls[i].data);
require(ok, "Call failed");
}
}
function _validateTarget(address target, address[] memory allowed) internal pure {
for (uint256 i = 0; i < allowed.length; i++) {
if (target == allowed[i]) return;
}
revert("Target not allowed");
}
}| Feature | EIP-7702 | EIP-4337 |
|---|---|---|
| Account type | EOA with delegation | Smart contract account |
| Infrastructure | Standard tx | Bundlers + EntryPoint |
| Gas overhead | Minimal | UserOp validation cost |
| Persistence | Per-tx or persistent | Permanent |
| Backwards compat | Full (same address) | New address |
| Batching | Yes | Yes |
chainId = 0 to be valid on all chains (useful but risky)address(0)tx.origin == msg.sender checks break for batched calls (avoid this pattern)function test_eip7702_batch() public {
// Foundry supports EIP-7702 via vm.signAuthorization
bytes memory auth = vm.signAuthorization(address(smartAccount), eoaPrivateKey);
vm.attachAuthorization(auth);
SmartAccount.Call[] memory calls = new SmartAccount.Call[](2);
calls[0] = SmartAccount.Call(address(token), 0, abi.encodeCall(token.approve, (router, 1e18)));
calls[1] = SmartAccount.Call(address(router), 0, abi.encodeCall(router.swap, (1e18)));
vm.prank(eoa);
SmartAccount(eoa).execute(calls);
}© ccashwell, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Just SKILL.md in skills/erc7702-patterns of ccashwell/evm-cortex.
Open the folder on GitHubat commit f8f3301
Erc7702 Patterns next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Erc7702 Patterns this skillccashwell/evm-cortex | 131 | — | ~1.7k | Automated safety check: Pass | MIT | |
| Entry Point Analyzeralt-research2/SolidityGuard | 104 | — | ~959 | Automated safety check: Pass | Custom licence | |
| Eip7702Nethereum/Nethereum | 2.3k | — | ~1.4k | Automated safety check: Pass | MIT | |
| Semantic Guard Analysisquillai-network/quillshield_skills | 129 | — | ~2.2k | Automated safety check: Warn | MIT | |
| Solidity Vulnerability Scanneralt-research2/SolidityGuard | 104 | — | ~1.6k | Automated safety check: Notes | Custom licence | |
| GenLayer ERC-7710 Connectorinternet-court/internet-court-skill | 6.4k | 1 repos | ~2.2k | Automated safety check: Pass | Custom licence |
alt-research2/SolidityGuard
Analyzes Solidity contract entry points to map attack surface.
Nethereum/Nethereum
Delegate smart contract code to EOAs with EIP-7702 using Nethereum (.NET).
quillai-network/quillshield_skills
Detects logic vulnerabilities in smart contracts by analyzing guard-state consistency patterns.
alt-research2/SolidityGuard
Comprehensive Solidity contract security scanner detecting 104 vulnerability patterns across reentrancy, access control, arithmetic, DeFi, proxy, and token categories.
internet-court/internet-court-skill
Specifies how a GenLayer Intelligent Contract decision about an agent's performance becomes an ERC-7710 revocation or policy change, through a relayer or bridge and an EVM controller.
elophanto/EloPhanto
A skill your agent uses when reviewing a Solidity, Vyper, or Rust (Solana/Anchor) smart contract for paid audit work or pre-launch sanity check.
ccashwell/evm-cortex
A skill your agent uses when preparing for a security audit, performing reconnaissance on a new codebase, or creating a protocol overview.
ccashwell/evm-cortex
A skill your agent uses when integrating with Aave V3 for lending, borrowing, flash loans, or building on top of Aave markets.
ccashwell/evm-cortex
Access control design patterns for Solidity protocols. An agent skill from ccashwell/evm-cortex.
ccashwell/evm-cortex
A skill your agent uses when running a local Ethereum node with Anvil.
ccashwell/evm-cortex
A skill your agent uses when performing systematic breadth-first review of all contracts during a security audit.
ccashwell/evm-cortex
A skill your agent uses when performing deep analysis of specific findings or high-risk areas during a security audit.
Categories
A skill your agent uses when building with EIP-7702 account abstraction. Erc7702 Patterns is an agent skill from ccashwell/evm-cortex. Use when building with EIP-7702 account abstraction.
Erc7702 Patterns fits situations like: building with EIP-7702 account abstraction; tasks that involve Smart contracts; tasks that involve Authorization and RBAC.
Run `npx skills add ccashwell/evm-cortex --skill erc7702-patterns -a claude-code`. Or copy the skill folder (skills/erc7702-patterns in ccashwell/evm-cortex) into .claude/skills/erc7702-patterns in your project. Claude Code loads it when a task matches its description.
Run `npx skills add ccashwell/evm-cortex --skill erc7702-patterns -a codex`. Or copy the skill folder (skills/erc7702-patterns in ccashwell/evm-cortex) into .agents/skills/erc7702-patterns in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add ccashwell/evm-cortex --skill erc7702-patterns -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/erc7702-patterns, .gemini/skills/erc7702-patterns, .github/skills/erc7702-patterns and .opencode/skills/erc7702-patterns in your project.
SKILL.md names no scripts, command-line tools or credentials: Erc7702 Patterns is instructions for the agent only.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Erc7702 Patterns is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.7k tokens (SKILL.md is roughly 6.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Erc7702 Patterns: Entry Point Analyzer (alt-research2/SolidityGuard, 104 stars), Eip7702 (Nethereum/Nethereum, 2.3k stars), Semantic Guard Analysis (quillai-network/quillshield_skills, 129 stars) and Solidity Vulnerability Scanner (alt-research2/SolidityGuard, 104 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
ccashwell (a GitHub user) maintains it in ccashwell/evm-cortex, which has 131 GitHub stars. The repository holds 89 skills in this directory. The repository was last updated on September 30, 2026.
Source: ccashwell/evm-cortex on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.