Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIDeepSeekDeepSeekMuseMuse+22 more

    Malicious Permit2 & Signature Drainer Auditor

    1

    Decodes EIP-712 typed signatures, detects unauthorized Uniswap Permit2 allowances, and generates instant emergency revocation calldata.

    $35

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned
    Malicious Permit2 & Signature Drainer Auditor

    Malicious Permit2 & Signature Drainer Auditor

    Example session with this skill installed

    Audit an EIP-712 PermitSingle signature requesting unlimited USDC allowance to an unverified contract on Permit2.

    • Read your context and instructions
    • Compiled the malicious permit2

    [PERMIT SENTRY] EIP-712 SIGNATURE INTEGRITY AUDIT

    Origin Domain: claim-arbitrum-foundation.org (FLAGGED PHISHING DOMAIN) | Target Wallet: 0x89A1...41F0

    1. Signature Type & Domain Analysis
    • Signature Standard: EIP-712 Typed Data (Uniswap Permit2 PermitSingle)
    • Verifying Contract: 0x000000000022D473030F116dDEE9F6B43aC78BA3 (Canonical Permit2)
    • Chain ID: 1 (Ethereum Mainnet)
    • Primary Type: PermitSingle
    2. Payload Decompilation & Threat Assessment
    • Permitted Token: USD Coin (USDC) (0xA0b8...eB48)

    Permitted Amount:

    UNLIMITED (115792089237316195423570985008687907853269984665640564039457584007913129639935)

    • Designated Spender: 0x49F2...77C1 (UNVERIFIED EOA / NEW CONTRACT CREATED 4 HOURS AGO)
    • Expiration: 1799999999 (Valid for 28 Years — High Exploit Risk)
    • Target Wallet Balance at Risk: $48,920.00 USDC
    • Threat Level: CRITICAL MALICIOUS DRAINER SIGNATURE (100% EXPLOIT)
    3. Exploit Execution Mechanism

    If signed, the attacker at 0x49F2...77C1 will submit the signature to Permit2 via permit2.permit(...) and immediately call permit2.transferFrom(...) to drain your entire $48,920.00 USDC balance without requiring any further confirmation or gas on your end.

    4. Immediate Security Directives
    1. DO NOT SIGN THIS MESSAGE. Reject the signature prompt immediately in your wallet.

    Revocation Precaution: If a prior signature was already confirmed, broadcast the emergency Permit2 lockdown transaction immediately:

    • Contract: 0x000000000022D473030F116dDEE9F6B43aC78BA3
    • Method: lockdown(TokenSpenderPair[])
    • Calldata: 0x485cc955... (Included in audit logs)

    Connects securely to your tools. The creator never sees your data.

    About this skill

    Malicious Permit2 and off-chain signature drainer auditor. Decodes EIP-712 typed signatures, detects unauthorized Uniswap Permit2 allowances, intercepts blind eth_sign requests, and generates deterministic emergency revocation calldata before wallet assets are swept.

    Security Capabilities:

    • EIP-712 Typed Data Decompiler: Parses off-chain signatures into domain separators, verifying contracts, spenders, and token amounts.
    • Uniswap Permit2 Sentry: Specifically audits PermitSingle and PermitBatch structures to prevent silent secondary drainer sweeps.
    • Blind eth_sign Interception: Identifies raw hash signing prompts that disguise malicious multisig or token transfers.
    • Allowance Magnitude & Expiration Analysis: Flags infinite (uint256.max) allowances and decades-long expiration timestamps.
    • One-Click Revocation Calldata: Generates precise hex calldata for standard ERC-20 zero approvals and Permit2 lockdown or invalidateUnorderedNonces.
    • 100% Offline & Private: Zero external API calls or key requirements. Audits signatures locally in sandboxed memory.

    Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse Claude Skills for Security.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before buying a skill.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed 7 days ago

    Permissions

    File Scopes

    .

    Parses and decodes EIP-712 typed data structures, hashes, and revocation calldata 100% offline in local memory.

    Listed7 days ago

    What's inside

    Frequently Asked Questions

    Decodes EIP-712 typed signatures, detects unauthorized Uniswap Permit2 allowances, and generates instant emergency revocation calldata.

    This skill uses the open SKILL.md standard. Use it through an MCP-compatible agent connected to Agensi, and check the compatibility information on this page for confirmed agents and required capabilities.

    Connect your AI agent to Agensi through MCP, then ask it to use Malicious Permit2 & Signature Drainer Auditor on your task. Your agent loads the latest approved version each time. Paid skills require a purchase or active subscription. Skill files are not available for download; your licence does not allow you to save, copy or export any part of a skill.

    New in Security