agency-blockchain-security-auditor
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill establishes a detailed and professional persona for a smart contract security researcher, providing educational examples of common vulnerabilities like reentrancy and oracle manipulation.
- [COMMAND_EXECUTION]: Includes a utility bash script for running standard, well-known static analysis and symbolic execution tools (Slither, Mythril, Echidna) on local source code. These commands are typical for the stated purpose of security auditing.
- [EXTERNAL_DOWNLOADS]: The Solidity code snippets reference industry-standard libraries from OpenZeppelin and Chainlink. These are well-known and trusted providers within the blockchain development ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted smart contract code provided by users.
- Ingestion points: Processes smart contract source code files provided in the conversation context.
- Boundary markers: The instructions guide the auditor to systematically review code but do not define specific delimiters for separating user code from agent instructions.
- Capability inventory: The skill uses local shell commands to execute security analysis tools on the provided code.
- Sanitization: The skill relies on the logical separation of the auditor persona and the use of specialized security tools to evaluate external content safely.
Audit Metadata