wagmi-v3

Pass

Audited by Gen Agent Trust Hub on Sep 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for ingesting and processing data from external blockchain contracts, which constitutes an indirect prompt injection attack surface.
  • Ingestion points: Blockchain logs via useWatchContractEvent and contract state via useReadContract in PATTERNS.md.
  • Boundary markers: None identified for processing generic contract return values or event logs.
  • Capability inventory: The skill utilizes useWriteContract for executing transactions and useWalletClient for managing wallet assets in PATTERNS.md.
  • Sanitization: While getAddress from viem is mandated for address validation to prevent malformed inputs, no specific sanitization or filtering is provided for string data retrieved from contract events or states.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 5, 2026, 11:32 PM