solidity
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a code generator and best-practice guide, which means it processes user-provided specifications to produce Solidity code. This represents a potential surface where maliciously crafted requirements could attempt to influence the agent's output, though the skill provides strong defensive guidelines to mitigate such risks.
- Ingestion points: User-provided contract specifications and technical requirements in SKILL.md.
- Boundary markers: The skill does not define specific delimiters for separating instructions from user data.
- Capability inventory: Provides templates for smart contract code, suggests CI/CD security tools (Slither, Aderyn), and provides deployment command examples using Foundry and Hardhat.
- Sanitization: There is no explicit sanitization logic defined for incoming user requests.
- [EXTERNAL_DOWNLOADS]: The skill references and encourages the use of various external tools and libraries including solhint, slither, aderyn, foundry, and hardhat. It also provides links to best-practice repositories from specialized security groups and established decentralized finance projects.
- References: References official documentation and GitHub repositories for Foundry, Hardhat, Trail of Bits, Recon-Fuzz, and the Solidity language blog.
- Tooling: Mentions industry-standard security tools for automated analysis and linting.
Audit Metadata