slither
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of CLI tools such as
slither,forge, andnpxto perform security analysis on smart contract projects. These are standard developer tools for the Solidity ecosystem. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading and installing the
slither-analyzerpackage and Solidity compilers (solc) from official, well-known registries and repositories such as PyPI and GitHub. - [PROMPT_INJECTION]: The
PI_CONCEALMENThint is a false positive. It identifies illustrative text documenting Slither's 'triage' feature, which allows users to interactively hide specific findings in subsequent reports, rather than an attempt to override agent instructions or conceal malicious activity. - [REMOTE_CODE_EXECUTION]: The skill documentation includes examples of writing and loading custom Python scripts as Slither plugins. This is a core, intended feature of the security framework and is used here for legitimate educational purposes.
Audit Metadata