solidity-real-estate-apac
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious code patterns, credential exfiltration, or unauthorized network operations were detected in the skill instructions or reference files.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection as it is designed to process untrusted developer-provided Solidity code and property transaction data.
- Ingestion points: The agent ingests and processes external smart contract source code and property transaction metadata provided by the user in
SKILL.mdand related reference documents. - Boundary markers: The instructions do not specify explicit delimiters or "ignore embedded instructions" warnings to isolate user-provided code from the agent's logic.
- Capability inventory: The skill enables the agent to perform technical audits, compliance reviews, and generation of smart contract code across multiple jurisdictions.
- Sanitization: There are no instructions for sanitizing, escaping, or validating the input data before it is incorporated into the agent's analytical context.
Audit Metadata