Blockchain Security Auditor
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze smart contract code provided by third-party users. This creates a surface for indirect prompt injection where malicious instructions could be hidden in comments or complex logic within the analyzed contracts to influence the agent's findings. * Ingestion points: User-provided smart contract source code and protocol documentation. * Boundary markers: None explicitly defined in the instructions to separate input data from the system prompt. * Capability inventory: The agent is tasked with logic analysis, report generation, and writing exploit Proof-of-Concepts in Solidity. * Sanitization: Not present; the skill relies on the agent's own internal safety filters and role-play constraints.
- [SAFE]: The technical content, including Solidity code blocks and bash script snippets, is provided for educational and demonstrative purposes. These code snippets illustrate known vulnerability patterns (e.g., reentrancy) and how to fix them, or provide templates for using standard security tools like Slither and Mythril.
- [SAFE]: No credentials, sensitive file access, or remote network operations were detected. The skill operates purely within the context of the conversation and provided code analysis.
Audit Metadata