viem
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect prompt injection surface identified. The skill ingests untrusted data from external blockchain RPC nodes via methods such as
watchContractEvent,getLogs, andreadContract(documented inexamples/watch-events/README.mdandexamples/read-contract/README.md).\n - Ingestion points: Blockchain events, logs, and contract return values are retrieved and processed into the agent's context.\n
- Boundary markers: There are no instructions or examples showing the use of delimiters or explicit warnings to ignore embedded instructions when handling these external inputs.\n
- Capability inventory: The skill facilitates high-privilege operations, including the ability to sign and send transactions (
writeContractinexamples/write-contract/README.md) and deploy new contracts (deployContractinexamples/deploy-contract/README.md).\n - Sanitization: The provided templates and examples do not include logic for sanitizing or validating the raw data ingested from the blockchain before it is presented to the agent.
Audit Metadata