entry-point-analyzer
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to verify the existence of and execute the Slither static analysis utility. Commands such as
which slitherandslither . --print entry-pointsare used to automate the identification of entry points in Solidity contracts. These actions are standard and necessary for the skill's primary function of smart contract auditing. - [PROMPT_INJECTION]: As an analysis tool for external codebases, this skill has an inherent surface for indirect prompt injection where malicious instructions could be embedded in the audited source code.
- Ingestion points: The skill reads various smart contract files (.sol, .vy, .rs, .move, .fc, .tact, .func) provided by the user.
- Boundary markers: The instructions do not specify explicit delimiters to separate the external code content from the agent's instructions.
- Capability inventory: The skill has access to Bash, Read, Grep, and Glob tools for analysis.
- Sanitization: No explicit sanitization or escaping of the processed code content is mentioned in the workflow.
- [SAFE]: The skill provides detailed and accurate reference guides for multiple languages (Solidity, Vyper, Solana, Move, TON, CosmWasm). It focuses on identifying state-changing functions while explicitly excluding read-only functions to minimize noise during security audits. No malicious obfuscation, persistence, or data exfiltration patterns were detected.
Audit Metadata