solidity-real-estate-us
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill uses a detailed persona ("expert in compliant, production-grade Solidity") to guide code generation. No attempts to bypass safety filters or override system instructions were detected.
- [DATA_EXFILTRATION]: No evidence of unauthorized network operations or access to sensitive local files. The code snippets correctly utilize standard blockchain identifiers (IPFS CIDs, Ethereum addresses) and stablecoins (USDC) for financial operations.
- [OBFUSCATION]: The content is provided in plain text and standard Solidity code. No Base64, zero-width characters, homoglyphs, or other obfuscation techniques are present.
- [REMOTE_CODE_EXECUTION]: The skill does not perform external package installations or execute remote scripts. All Solidity examples are self-contained or reference standard OpenZeppelin-style interfaces (ERC20, ERC721).
- [INDIRECT_PROMPT_INJECTION]: The skill includes structures for handling external data like property descriptions and legal documents.
- Ingestion points:
PropertyDataandLLCDatastructures inSKILL.mdandreferences/tokenization-structures.mdrespectively. - Boundary markers: Not explicitly defined within the code templates.
- Capability inventory: The skill is designed for code generation and documentation; it does not invoke shell tools or system commands on the data.
- Sanitization: Data is stored as
bytes32orstringin smart contract storage, which is standard for blockchain applications. - [DYNAMIC_CONTEXT_INJECTION]: No use of the
!commandsyntax or other pre-execution shell hooks was found in the documentation.
Audit Metadata