smart-contract-vulnerabilities
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a comprehensive reference for smart contract auditing, covering critical security concepts like reentrancy, integer overflows, and access control. It provides side-by-side comparisons of vulnerable and fixed code to assist in secure development. The recommended security tools (Slither, Mythril, Foundry) are industry standards and their mention is appropriate for the skill's purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze untrusted third-party code (Solidity smart contracts). This creates a surface for indirect prompt injection where malicious code could attempt to influence the agent's audit findings.
- Ingestion points: Contract source code provided by users for auditing (SKILL.md, SOLIDITY_VULN_PATTERNS.md).
- Boundary markers: None defined within the skill; the skill relies on the agent's standard handling of external content.
- Capability inventory: Recommends the use of external security analysis tools like Slither, Mythril, and Forge for evaluating contract security.
- Sanitization: The skill does not provide specific instructions for sanitizing or escaping the content of the contracts being audited.
Audit Metadata