The Agent Skills Directory

[SAFE]: The skill defines a comprehensive framework for auditing Cairo smart contracts. Its operations are aligned with its stated purpose of security auditing.
[EXTERNAL_DOWNLOADS]: The skill recommends installing caracal via pip install caracal. Caracal is an established, open-source static analysis tool for Cairo developed by Trail of Bits, a well-known security research organization. This reference is a standard procedural recommendation for conducting security scans.
[COMMAND_EXECUTION]: The skill uses command-line utilities like rg (ripgrep) and caracal to perform static analysis on source code. These commands are localized to the project directory and are used solely for identifying potentially vulnerable code patterns.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input in the form of Cairo source code files (src/*.cairo). While it lacks explicit boundary markers for this data, it is a specialized security tool designed to analyze such content, and no exploitable capabilities or downstream risks were identified.

cairo-vulnerability-scanner