blockchain-security-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external, untrusted smart contract source code. This represents a potential surface for indirect prompt injection where malicious instructions could be embedded within the audited code to influence the agent or exploit analysis tools.
- Ingestion points: Untrusted Solidity source files (e.g.,
src/MainContract.sol) and project directories ingested for review. - Boundary markers: The instructions lack explicit delimiters or "ignore embedded instructions" warnings for the code being analyzed.
- Capability inventory: The skill utilizes shell scripts to call external analysis tools like Slither, Mythril, and Echidna.
- Sanitization: There is no evidence of input validation or sanitization for the code provided to the agent for auditing.
- [COMMAND_EXECUTION]: Provides detailed bash script templates for running automated security scanners (Slither, Mythril, Echidna, and Forge). While these are standard tools for blockchain auditing, their execution involves interacting with the underlying system environment.
- [EXTERNAL_DOWNLOADS]: The Solidity code examples reference and import external libraries from established ecosystem providers like OpenZeppelin and Chainlink. These are widely recognized and trusted sources in the blockchain community.
Audit Metadata