aiken-smart-contract

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is a high-quality educational and developer tool focused on the Aiken programming language. It includes detailed guides on language syntax, validator patterns, and testing strategies.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it is designed to ingest and process smart contract code.
  • Ingestion points: The skill reads Aiken source code (.ak), transaction blueprints (plutus.json), and project configuration files (aiken.toml).
  • Boundary markers: The skill establishes clear boundaries through its 'Auditing Methodology' and 'Security Patterns' documentation, which instructs the agent to perform systematic scans for vulnerabilities (e.g., double satisfaction, datum hijacking) in the processed code.
  • Capability inventory: The skill uses the Aiken CLI (aiken build, aiken check, aiken fmt) for local validation and suggests integration with MeshJS for network operations (transaction submission to Ogmios/Kupo nodes).
  • Sanitization: While no specific input sanitization scripts are provided, the skill enforces safety through compiler-driven type checking, exhaustive pattern matching requirements, and property-based testing using the aiken-lang/fuzz library.
  • [EXTERNAL_DOWNLOADS]: All external references are to official organizations (Aiken-lang, IOG, Cardano Foundation), well-known ecosystem projects (MeshJS, Minswap, Anastasia Labs), or the vendor's own established repositories (github.com/ADAvault). These are documented neutrally as intended functional dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 07:01 PM