web3-poc-foundry

Fail

Audited by Snyk on Aug 27, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (critical risk: 1.00). This document is an explicit, detailed how-to guide for creating and running DeFi exploit proofs-of-concept, including runnable exploit code, cheatcodes, and attack patterns for draining or manipulating protocol funds.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The SKILL.md is explicitly a Foundry / DeFi PoC guide that includes concrete blockchain financial operations: ERC20 approve/transfer/transferFrom interfaces and calls, invoking deposits/withdrawals, flash-loan usage and repayment, DEX swap calls, signing helper (vm.sign), RPC endpoints and tooling to send transactions (cast send, anvil with --unlocked). These are specific crypto/blockchain transaction primitives (wallet signing, swaps, token transfers, flash loans) — i.e., direct financial execution capabilities.

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W009
MEDIUM

Direct money access capability detected (payment gateways, crypto, banking).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 27, 2026, 05:38 AM
Issues
2
Security Audit — snyk — web3-poc-foundry