web3-bug-classes
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to facilitate the auditing of external smart contract codebases, which serves as a primary ingestion point for untrusted data that could influence the agent's logic.\n
- Ingestion points: The agent is instructed to search for and analyze external Solidity source files (e.g., in
contracts/directories) using the provided grep patterns.\n - Boundary markers: The skill does not provide specific instructions or delimiters to wrap the audited code or to tell the agent to ignore embedded instructions found within comments or strings in the target files.\n
- Capability inventory: To utilize the skill effectively, the agent requires the capability to execute shell commands (
grep) and read project files, both of which can be leveraged if a malicious file successfully influences the agent's execution flow.\n - Sanitization: The skill contains no instructions for sanitizing or filtering the content retrieved from the files before it is processed by the agent.
Audit Metadata