Layer 2s
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from
https://ethskills.com/l2s/SKILL.mdand references a GitHub repository for a related plugin (github.com/austintgriffith/ethskills). This is consistent with the skill's purpose of providing Ethereum L2 updates and uses the provider's own domain and developer account. - [PROMPT_INJECTION]: The skill provides an interface for the agent to ingest content from an external URL. This represents an indirect prompt injection surface as the agent is instructed to process remote data.
- Ingestion points: External URL
https://ethskills.com/l2s/SKILL.mdreferenced in bothcatalog.jsonandSKILL.md. - Boundary markers: No delimiters or "ignore instructions" warnings are present around the fetched content.
- Capability inventory: Use of
curlfor fetching data and instructions for plugin installation. - Sanitization: No sanitization or validation of the remote content is implemented within the skill files.
Audit Metadata