tools
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes tools like the Blockscout MCP server that allow an agent to ingest data from the Ethereum blockchain, creating a surface for indirect prompt injection.
- Ingestion points: External blockchain data via the Blockscout MCP server (SKILL.md).
- Boundary markers: None specified in the tool descriptions.
- Capability inventory: Includes transaction execution capabilities via Foundry's
cast sendand the x402 payment SDKs. - Sanitization: Not applicable as the skill is a documentation resource, not an implementation script.
- [SAFE]: The skill acts as a curated directory for established Ethereum development tools such as Foundry, Hardhat, and Scaffold-ETH. All external references and packages (e.g., Coinbase's x402) originate from well-known and reputable technology providers. The provided code snippets are standard educational examples and do not contain hardcoded credentials or malicious logic.
Audit Metadata