dual-stacking
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data that is then used to influence agent actions (blockchain transactions).
- Ingestion points: User-provided inputs via
--address,--reward-address,--cycle, and--rollbackindual-stacking.ts. - Boundary markers: None explicitly defined in the CLI help or instruction prompts to prevent the agent from misinterpreting embedded data within these fields.
- Capability inventory: The skill has the capability to execute blockchain write operations (
enroll,opt-out) using thecallContractfunction indual-stacking.ts. - Sanitization: Inputs are partially sanitized via
parseIntfor numeric values andprincipalCVfor Stacks addresses, which enforces basic format validation before transmission to the blockchain.
Audit Metadata