code-review-solidity
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, specifically Solidity source files and pull request descriptions, creating a surface for indirect prompt injection where malicious instructions could be embedded in the audited code.\n
- Ingestion points: Smart contract source code (.sol files) and codebase pull requests.\n
- Boundary markers: The skill does not define explicit delimiters or instructions to ignore potential commands embedded within the code comments or logic.\n
- Capability inventory: The agent is instructed to use analysis tools including slither, mythril, echidna, and foundry.\n
- Sanitization: No evidence of sanitization or filtering is provided for the external source code before processing.
Audit Metadata