solidity-security
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides detailed guidance and secure patterns for mitigating smart contract vulnerabilities like reentrancy, access control failures, and integer overflows. It correctly emphasizes standard practices such as the Checks-Effects-Interactions (CEI) pattern.\n- [SAFE]: It references reputable and well-known development tools and libraries, including OpenZeppelin, Hardhat, Ethers, and Slither, which are appropriate for the skill's intended purpose.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided smart contract source code, creating an ingestion surface for indirect prompt injection.\n
- Ingestion points: User-supplied Solidity contracts for analysis and auditing.\n
- Boundary markers: No explicit delimiters or instructions to ignore embedded prompts in source code were found.\n
- Capability inventory: Mentions static analysis tools (Slither, Mythril) and testing scripts.\n
- Sanitization: No specific input sanitization for analyzed code is defined.\n- [SAFE]: No malicious command execution, data exfiltration patterns, or obfuscation techniques were detected in the skill content.
Audit Metadata