agency-solidity-smart-contract-engineer
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill generates smart contract code based on user-provided specifications, which presents an inherent attack surface for indirect prompt injection. A malicious user could supply requirements intended to induce the agent to generate insecure or malicious contract code. The skill mitigates this through extensive instructions requiring the agent to prioritize security (e.g., reentrancy guards, checks-effects-interactions).
- Ingestion points: User-supplied protocol mechanics, trust assumptions, and business requirements during interaction.
- Boundary markers: Absent.
- Capability inventory: Generates Solidity code, Hardhat deployment scripts, and Foundry test suites.
- Sanitization: No instructions for input validation or logic sanitization are provided.
Audit Metadata