web3-devkit-cli

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of a global npm package web3-devkit-cli and provides instructions to clone source code from a GitHub repository (github.com/jazzband/web3-devkit-cli.git) for local builds.
  • [COMMAND_EXECUTION]: The provided TypeScript integration examples utilize child_process.execSync to execute shell commands. This pattern creates a risk of command injection if the agent or user interpolates unsanitized input into the command strings.
  • [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection via its event monitoring capabilities, which ingest untrusted data from blockchain RPC providers.
  • Ingestion points: Data retrieved through web3 monitor contract and web3 monitor wallet commands (SKILL.md).
  • Boundary markers: No specific delimiters or "ignore instructions" warnings are implemented for processing external blockchain data.
  • Capability inventory: The skill and its associated examples demonstrate capabilities for file system writes (fs.writeFileSync), network operations (deployments), and subprocess execution (execSync).
  • Sanitization: The instructions do not specify any validation or sanitization of data retrieved from the blockchain before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 10:04 AM
Security Audit — agent-trust-hub — web3-devkit-cli