菜单
Use when you encounter an EVM 4-byte function selector (0x followed by 8 hex chars at the start of calldata) and need to identify which function it represents, or when authoring a forbiddenSelectors policy rule. Provides a curated table of common selectors and a decoding workflow for unknown ones.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Use when writing or reviewing Rust code in this repo. Covers the Cargo workspace layout, error handling, async patterns, serde wire shapes that must match the TypeScript scaffold byte-for-byte, and testing conventions specific to ChainShield.
Use when authoring or reviewing the onchain layer of ChainShield. Covers PolicyAnchor, optional EmergencyVault, custom-error patterns, OpenZeppelin imports, Foundry test conventions, and the Galileo testnet deploy flow. Solidity surface is intentionally small.
Use when starting Phase 2 work to add the 0G, KeeperHub, or Gensyn AXL adapter modules. Provides the verbatim entry points, environment variables, and the trait seam to plug into without disturbing the Phase 1 engine. Backend is Rust; sponsor calls go through traits with one impl per provider.
Use when reasoning about ERC-20 token approvals, transfers, or any code path that touches tokens on behalf of users. Catalogs the attack patterns that ChainShield is designed to prevent and the engine rules that defend against each.
Use when designing a new ChainShield Policy for a wallet, treasury, or protocol multisig. Walks through risk profile, rule selection, default values, and remediation hookup so the resulting policy enforces real protection without blocking routine ops.
基于 SOC 职业分类
| name | selector-decode |
| description | Use when you encounter an EVM 4-byte function selector (0x followed by 8 hex chars at the start of calldata) and need to identify which function it represents, or when authoring a forbiddenSelectors policy rule. Provides a curated table of common selectors and a decoding workflow for unknown ones. |
A 4-byte selector is the first 4 bytes of EVM calldata. It is keccak256(canonicalSignature)[0:4] where canonicalSignature is the function name plus its parameter type list, with no spaces, e.g. transfer(address,uint256).
| Selector | Signature | Risk profile |
|---|---|---|
0xa9059cbb | transfer(address,uint256) | Direct outflow. Cap by destination + amount. |
0x095ea7b3 | approve(address,uint256) | Authorization to drain. Block infinite approvals; cap by spender + amount. |
0x23b872dd | transferFrom(address,address,uint256) | Pull payment. Often invoked by routers/protocols on behalf of the user. |
0x39509351 | increaseAllowance(address,uint256) | Quietly raises an existing approval. Treat like approve. |
0xa457c2d7 | decreaseAllowance(address,uint256) | Safe to allow; reduces exposure. |
0x70a08231 | balanceOf(address) | View only; no policy concern. |
| Selector | Signature | Risk profile |
|---|---|---|
0x42842e0e | safeTransferFrom(address,address,uint256) | NFT outflow. |
0x23b872dd | transferFrom(address,address,uint256) | NFT outflow (overlap with ERC-20). |
0xa22cb465 | setApprovalForAll(address,bool) | Critical. Grants spender control over ALL NFTs in the collection. Block by default. |
0x095ea7b3 | approve(address,uint256) | Per-token approval (uint256 = tokenId). |
| Selector | Signature | Risk profile |
|---|---|---|
0x8456cb59 | pause() | Pause contract. Often a remediation primitive. |
0x3f4ba83a | unpause() | Resume. |
0xf2fde38b | transferOwnership(address) | Hand over admin. Block unless explicitly allowlisted. |
0x715018a6 | renounceOwnership() | Brick contract. Block unless intentional. |
| Selector | Signature | Notes |
|---|---|---|
0x38ed1739 | swapExactTokensForTokens(uint256,uint256,address[],address,uint256) | V2-style swap with deadline + min-out. |
0x414bf389 | exactInputSingle((address,address,uint24,address,uint256,uint256,uint256,uint160)) | V3 single-hop swap. |
0xc04b8d59 | exactInput((bytes,address,uint256,uint256,uint256)) | V3 multi-hop. |
0xfb3bdb41 | swapETHForExactTokens(uint256,address[],address,uint256) | ETH in, exact tokens out. |
intent.data slice [0:10] (the 0x plus 8 hex chars).https://www.4byte.directory/signatures/?bytes4_signature=0x.... Multiple signatures collide on the same 4 bytes occasionally; pick the one consistent with the destination contract.REQUIRE_HUMAN_CONFIRMATION rather than ALLOW.forbiddenSelectors ruleTreat these as default-block for any treasury policy:
setApprovalForAll(address,bool) (0xa22cb465)transferOwnership(address) (0xf2fde38b)renounceOwnership() (0x715018a6)Treat these as block-with-cap (use approvalCapByToken instead of a flat ban):
approve(address,uint256) (0x095ea7b3)increaseAllowance(address,uint256) (0x39509351)src/core/selectors.ts exposes:
selectorOf(data) returns the lowercase 10-char selector or null if calldata is too short.decodeAddress(data, paramIndex) reads the paramIndex-th 32-byte word and returns the trailing 20 bytes as a hex address.decodeUint256(data, paramIndex) returns the paramIndex-th 32-byte word as a bigint.When extending these helpers, keep them dependency-free (no ethers ABI coder) so the engine stays cheap to run.