skills/hairyf/blockchain-skills/geth/Gen Agent Trust Hub

geth

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a documentation-only resource that provides guidance on using official Ethereum developer tools. It does not contain any executable scripts, suspicious command patterns, or prompts designed to bypass AI safety guardrails.
  • [SAFE]: All external references and download instructions point to official Ethereum sources (ethereum.org and github.com/ethereum). For example, feature-abigen.md mentions installing a tool via go install github.com/ethereum/go-ethereum/cmd/abigen@latest, which is a standard procedure for this trusted repository.
  • [SAFE]: The skill explicitly documents security best practices in references/best-practices-rpc-security.md, warning against exposing sensitive JSON-RPC namespaces (like admin or debug) and advising against the unsafe --allow-insecure-unlock flag.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes tools that process external, potentially untrusted data such as contract ABIs (abigen), transaction sign requests (clef), and Ethereum bytecode (evm). While this represents a vulnerability surface for the agent if it processes attacker-controlled files, the skill provides correct documentation for these standard tools and does not introduce malicious behavior itself.
  • Ingestion points: Tools described in references/feature-abigen.md (ABI files), references/feature-clef.md (sign requests), and references/features-evm.md (bytecode inputs).
  • Boundary markers: None explicitly defined in the documentation body.
  • Capability inventory: The skill documents CLI usage for tools that interact with the filesystem (keystores) and network (RPC).
  • Sanitization: The skill documents the tools' intended use cases but does not provide specific input sanitization wrappers for the agent.
  • [DYNAMIC_EXECUTION]: The skill documents tools that perform dynamic operations, such as abigen (generates Go source code from ABI JSON) and evm run (executes provided EVM bytecode). These are standard features of the Go Ethereum toolchain and are documented here for legitimate developer use cases.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 12:14 PM