solidity-security-audit
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions and shell commands to download and install various smart contract security tools from well-known and reputable services. Examples include Paradigm's Foundry framework and Cyfrin's Aderyn analyzer. These sources are established technology providers in the security community.
- [PROMPT_INJECTION]: The skill processes untrusted user-provided Solidity code for auditing and instructs the agent to run automated analysis tools. This process involves compiling and executing code from untrusted sources (e.g., using forge test in Phase 2). While this creates a surface for indirect prompt injection, it is an essential part of the skill's primary function as an audit tool and the risk is associated with its intended purpose.
Audit Metadata