orchestration
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references external documentation and utility skills from 'ethskills.com' and 'bgipfs.com' to provide additional context for audits and production deployments. These resources are specific to the Ethereum developer ecosystem and the Scaffold-ETH framework.
- [COMMAND_EXECUTION]: Instructs the agent to use standard development tools and commands, including 'npx', 'yarn', 'git', and 'grep'. These are used for project initialization, dependency management, and executing security audits to identify hardcoded secrets.
- [INDIRECT_PROMPT_INJECTION]: The skill includes instructions to fetch external markdown files ('audit/SKILL.md', 'qa/SKILL.md') which provide runtime guidelines for the agent. While this introduces an external ingestion point, the content is scoped to technical quality assurance and contract auditing.
- [SAFE]: The skill promotes security best practices by providing specific shell commands to detect leaked private keys, API keys, and RPC URLs before committing code to version control. It correctly advises the use of '.env' files and '.gitignore' for secret management.
Audit Metadata