web3-audit
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted smart contract source code from the 'contracts/' directory. This ingestion point lacks defined boundary markers or specific instructions for the agent to disregard instructions embedded within the audit targets. The skill provides the agent with functional capabilities, including shell command execution and the Foundry testing suite, which are used to process and interact with this untrusted data. No evidence of sanitization or validation of the ingested code content is provided.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute multiple shell commands, specifically 'grep' for pattern matching across the filesystem and the 'forge' CLI tool for running security tests and proof-of-concept exploits.
Audit Metadata