algorand-python
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform project operations using the
algokitCLI for initialization, building, and testing. - Evidence: Usage of
algokit init,algokit project run build, andalgokit project run testinSKILL.md. - [EXTERNAL_DOWNLOADS]: The skill fetches templates and examples from official Algorand Foundation public GitHub repositories.
- Evidence: References to
algorandfoundation/devportal-code-examplesandalgorandfoundation/puyainSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the development and testing of user-provided smart contract logic, which represents an attack surface for untrusted data ingestion.
- Ingestion points: User-supplied Python contract code and transaction parameters in
SKILL.mdandreferences/testing.md. - Boundary markers: Absent; instructions do not define specific delimiters for isolating untrusted user code from agent instructions.
- Capability inventory: Shell command execution via
algokitand local file system operations inSKILL.md. - Sanitization: Absent; no explicit validation steps are provided for user-inputted contract source code.
- [DYNAMIC_EXECUTION]: The development workflow involves the runtime compilation of Python source code into TEAL bytecode using the PuyaPy compiler.
- Evidence: Compilation step using
algokit project run buildfor contract generation inSKILL.mdandreferences/deploy-interaction.md.
Audit Metadata