geth
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation-only resource that provides guidance on using official Ethereum developer tools. It does not contain any executable scripts, suspicious command patterns, or prompts designed to bypass AI safety guardrails.
- [SAFE]: All external references and download instructions point to official Ethereum sources (ethereum.org and github.com/ethereum). For example,
feature-abigen.mdmentions installing a tool viago install github.com/ethereum/go-ethereum/cmd/abigen@latest, which is a standard procedure for this trusted repository. - [SAFE]: The skill explicitly documents security best practices in
references/best-practices-rpc-security.md, warning against exposing sensitive JSON-RPC namespaces (like admin or debug) and advising against the unsafe--allow-insecure-unlockflag. - [INDIRECT_PROMPT_INJECTION]: The skill describes tools that process external, potentially untrusted data such as contract ABIs (
abigen), transaction sign requests (clef), and Ethereum bytecode (evm). While this represents a vulnerability surface for the agent if it processes attacker-controlled files, the skill provides correct documentation for these standard tools and does not introduce malicious behavior itself. - Ingestion points: Tools described in
references/feature-abigen.md(ABI files),references/feature-clef.md(sign requests), andreferences/features-evm.md(bytecode inputs). - Boundary markers: None explicitly defined in the documentation body.
- Capability inventory: The skill documents CLI usage for tools that interact with the filesystem (keystores) and network (RPC).
- Sanitization: The skill documents the tools' intended use cases but does not provide specific input sanitization wrappers for the agent.
- [DYNAMIC_EXECUTION]: The skill documents tools that perform dynamic operations, such as
abigen(generates Go source code from ABI JSON) andevm run(executes provided EVM bytecode). These are standard features of the Go Ethereum toolchain and are documented here for legitimate developer use cases.
Audit Metadata