web3-solidity-audit-mcp

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill explicitly offers step-by-step exploit scenarios and ready-to-run Foundry PoC templates for identified vulnerabilities, which can facilitate offensive use despite being presented as an audit tool.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The CI/install steps download and execute remote installers/binaries (curl | bash and direct release tarball) for Foundry and Aderyn—e.g., https://foundry.paradigm.xyz and https://github.com/Cyfrin/aderyn/releases/download/${ADERYN_VER}/aderyn-x86_64-unknown-linux-gnu.tar.xz—which are fetched and run during installation/CI and are required dependencies for the skill's analyzers.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill includes installation commands that modify the system (global npm installs, tool installation) and explicitly runs "sudo install -m 755 /tmp/aderyn /usr/local/bin/aderyn", which requests elevated privileges to write to /usr/local/bin and thus can change the host machine's state.