token-transfers
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to include the OpenZeppelin Compact Smart Contracts library as a git submodule from the official GitHub repository at github.com/OpenZeppelin/compact-contracts.git. This is a well-known and reputable source for smart contract development.
- [INDIRECT_PROMPT_INJECTION]: The skill documents patterns for ingesting data from external network sources via indexer queries, which is a common requirement for blockchain applications.
- Ingestion points: Data enters the context through indexer responses in the getUnshieldedBalance and getTokenBalance functions in SKILL.md.
- Boundary markers: Not present in the pedagogical code examples.
- Capability inventory: The skill demonstrates the ability to broadcast transactions to the network using the wallet.submitTransaction method.
- Sanitization: Code snippets demonstrate explicit conversion to BigInt and structured property access, which serves as a baseline for data validation.
Audit Metadata