blockchain-ctf
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use several security and development CLI tools, including Foundry (
forge,cast,anvil), Solidity compiler (solc), and static/symbolic analyzers (slither,mythril,echidna). These tools are used within their intended scope for contract auditing and blockchain interaction. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, such as contract source code, ABI definitions, and transaction logs, which could potentially contain malicious instructions or adversarial patterns designed to mislead the agent's analysis.
- Ingestion points: External data is ingested through RPC providers, blockchain explorers, and local contract files as described in
SKILL.mdandreferences/web3-workflow.md. - Boundary markers: The skill includes explicit instructions to treat third-party contracts as read-only and requires explicit authorization for any state-changing transactions.
- Capability inventory: The agent has capabilities to read/write files and execute shell commands for the listed security toolchain.
- Sanitization: The workflow prioritizes analysis in isolated local fork environments (using Anvil/Foundry) to minimize risk when dealing with untrusted code.
Audit Metadata