solidity-unit-tests
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to analyze Solidity smart contracts and generate corresponding test files. All operations, such as reading source code and writing test specifications, are restricted to the local project environment.
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute standard development commands, includingforge(Foundry's build and test runner),bulloak(a Solidity test generator), andgit. These actions are necessary for the skill's stated purpose of building and verifying smart contract tests. - [DATA_INGESTION]: The skill ingests data from Solidity source files and
.treespecification files within the repository. While this creates a surface for indirect prompt injection (where instructions hidden in code could attempt to influence the agent), this is a standard risk for automated code analysis tools and is mitigated by the specific, narrow scope of the skill's operations.
Audit Metadata