web3-devkit-cli
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of a global npm package
web3-devkit-cliand provides instructions to clone source code from a GitHub repository (github.com/jazzband/web3-devkit-cli.git) for local builds. - [COMMAND_EXECUTION]: The provided TypeScript integration examples utilize
child_process.execSyncto execute shell commands. This pattern creates a risk of command injection if the agent or user interpolates unsanitized input into the command strings. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection via its event monitoring capabilities, which ingest untrusted data from blockchain RPC providers.
- Ingestion points: Data retrieved through
web3 monitor contractandweb3 monitor walletcommands (SKILL.md). - Boundary markers: No specific delimiters or "ignore instructions" warnings are implemented for processing external blockchain data.
- Capability inventory: The skill and its associated examples demonstrate capabilities for file system writes (
fs.writeFileSync), network operations (deployments), and subprocess execution (execSync). - Sanitization: The instructions do not specify any validation or sanitization of data retrieved from the blockchain before it is processed by the agent.
Audit Metadata