viem
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues detected. The skill focus is on providing high-quality, type-safe TypeScript patterns for blockchain development using the Viem library.
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external data from blockchain event logs and user-provided addresses. It includes built-in sanitization examples to manage this risk surface.
- Ingestion points: Blockchain logs in the
onLogscallback and user-provided addresses in the validation patterns found inreferences/contract-patterns.md. - Boundary markers: Not applicable for these documentation-style snippets.
- Capability inventory: The patterns cover transaction execution (
writeContract), message signing (signMessage), and contract deployment (deployContract). - Sanitization: Recommends using
isAddressandgetAddressutilities to validate and normalize external inputs before processing.
Audit Metadata