solidity-supply-chain-uk
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines numerous Solidity data structures and interfaces intended to process data from external sources, such as supplier names, audit findings, and commodity descriptions. This creates a surface where malicious instructions could be embedded in the data provided to an agent using this skill.
- Ingestion points: Multiple files define structs with string or bytes32 fields for external data:
SKILL.md(supplierId, supplierName, remediationActions, auditReportCID, selfAttestationHash, commodityType, legalComplianceEvidenceCID, riskAssessmentCID, mitigationMeasures, evidenceCID, ukProductCode, serialNumber, batchNumber, thirdPartyVerifierCID),references/msa-guidance.md(organisationName, statementCID, govRegistryRef, specificRisks, selfAssessmentCID, auditReportCID, trainingMaterialCID, contractClauseCID, remediationPlanCID, mechanismType), andreferences/ukca-marking.md(productName, manufacturerName, manufacturerAddressHash, ukResponsiblePersonName, ukRegulationsApplied, ukStandardsApplied, docIPFSCID, standardsApplied, testReportCIDs, ukDivergenceNotesCID, ukimsRegistrationRef, recallProcedureCID). - Boundary markers: There are no explicit instructions or delimiters provided to the agent to distinguish between the compliance logic and the potentially adversarial content within these data fields.
- Capability inventory: While the skill itself does not contain executable scripts or shell commands, it provides patterns for interacting with external oracles and smart contracts, which can be manipulated via injected data.
- Sanitization: No input validation or sanitization mechanisms are suggested or implemented in the provided Solidity templates.
Audit Metadata