solidity-finance-us
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate, high-quality technical documentation and code templates for Solidity smart contracts. It adheres to established financial regulatory frameworks including SEC Reg D/Reg S, MiFID II, and FATF guidelines.
- [PROMPT_INJECTION]: No malicious prompt injection patterns were found. The instructions do not attempt to bypass safety filters, override system prompts, or extract sensitive instructions.
- [DATA_EXFILTRATION]: No evidence of credential harvesting, access to sensitive file paths (e.g., .env, .aws/credentials), or unauthorized network exfiltration was detected. Code patterns correctly use external oracles and registries for compliance checks without exposing PII.
- [OBFUSCATION]: Content is presented in clear, readable markdown and Solidity code. No obfuscation techniques such as multi-layer Base64, zero-width characters, or homoglyph substitution were found.
- [REMOTE_CODE_EXECUTION]: The skill does not perform any remote package installations or script executions. External references are limited to reputable standard documentation (e.g., Tokeny's GitHub for ERC-3643) for informational purposes only.
- [INDIRECT_PROMPT_INJECTION]: The skill's purpose is to audit and write Solidity code. While this involves processing user-provided input, the skill does not exhibit any patterns that would lead the agent to execute hidden instructions within the analyzed code.
Audit Metadata