skills/bankrbot/skills/Tools/Gen Agent Trust Hub

Tools

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONNO_CODE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches documentation from the vendor's domain (ethskills.com) and provides instructions to install a Claude plugin from a GitHub repository (github.com/austintgriffith/ethskills). These resources are directly related to the skill's stated purpose of providing developer tools.
  • [NO_CODE]: The skill package does not include any executable scripts, binaries, or source code files; it serves primarily as a metadata and documentation hub pointing to external tools.
  • [COMMAND_EXECUTION]: The catalog.json file contains a demonstration of the cast command-line tool. This includes examples of calling and sending Ethereum transactions, as well as signing transactions using a private key provided via an environment variable.
  • [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by instructing the agent to fetch and process content from an external URL.
  • Ingestion points: catalog.json instructs the agent to read content from https://ethskills.com/tools/SKILL.md.
  • Boundary markers: No specific delimiters or warnings to ignore embedded instructions are provided for the external content.
  • Capability inventory: The skill environment assumes the presence of external CLI tools such as cast, clawhub, and claude plugins.
  • Sanitization: There is no evidence of validation or sanitization of the remote markdown content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 01:18 PM
Security Audit — agent-trust-hub — Tools