near-contract-audit
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of Markdown documentation and reference materials intended to assist an agent in identifying common NEAR smart contract vulnerabilities. No scripts or executable files are provided, and all references target local documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data (external NEAR smart contract code). Although this creates an attack surface for indirect prompt injection, the skill itself does not define any executable scripts, tools, or platform capabilities (such as network access or file system writes) that would facilitate an exploitation of the agent.
- Ingestion points: Smart contract source code analyzed during the audit workflow described in SKILL.md.
- Boundary markers: None provided; the skill instructions assume the agent is analyzing raw code blocks.
- Capability inventory: None. The skill contains no executable scripts, shell commands, or specific tool requirements that grant the agent the ability to perform actions on the underlying system.
- Sanitization: No sanitization or filtering logic is included for the ingested code content.
Audit Metadata