web3-audit
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data (smart contract source code). This creates a surface for indirect prompt injection attacks where malicious instructions could be embedded within code comments or metadata of a contract being audited to manipulate the agent's behavior or conclusions.
- Ingestion points: Processes external Solidity and Rust source code files during audits.
- Boundary markers: The skill lacks explicit instructions for the agent to ignore or delimit instructions found within the audited code.
- Capability inventory: Utilizes shell commands (
grep) and testing frameworks (Foundry/forge) to perform analysis. - Sanitization: No evidence of sanitization or filtering for the external content before processing.
- [COMMAND_EXECUTION]: The skill provides numerous pre-defined shell commands using
grepand theforgeCLI (Foundry). While these are intended for legitimate auditing purposes, they represent a capability for the agent to execute commands on the local file system.
Audit Metadata