solidity-unit-tests

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to analyze Solidity smart contracts and generate corresponding test files. All operations, such as reading source code and writing test specifications, are restricted to the local project environment.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute standard development commands, including forge (Foundry's build and test runner), bulloak (a Solidity test generator), and git. These actions are necessary for the skill's stated purpose of building and verifying smart contract tests.
  • [DATA_INGESTION]: The skill ingests data from Solidity source files and .tree specification files within the repository. While this creates a surface for indirect prompt injection (where instructions hidden in code could attempt to influence the agent), this is a standard risk for automated code analysis tools and is mitigated by the specific, narrow scope of the skill's operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 11:57 PM
Security Audit — agent-trust-hub — solidity-unit-tests