strk20-anonymizer-contracts
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill audits and reviews user-supplied Cairo contract code, which can be a vector for indirect prompt injection attacks if malicious instructions are embedded in the code.\n
- Ingestion points: Processes user-provided Cairo source code, protocol designs, and DeFi integration specifications from the conversation context.\n
- Boundary markers: There are no defined delimiters or instructions to the agent to ignore potentially malicious embedded instructions within the processed contract data.\n
- Capability inventory: The agent analyzes contract logic and suggests code implementations based on reference patterns such as the SwapHelper and VesuLendingHelper.\n
- Sanitization: No explicit input validation or sanitization mechanisms are defined for the contract code before analysis.\n- [EXTERNAL_DOWNLOADS]: The skill references code and documentation from both official and community-run sources.\n
- Fetches reference implementations from official Starknet repositories under the starkware-libs organization (well-known service).\n
- Links to the unofficial strk20-by-example.org for supplemental patterns, accompanied by explicit security disclaimers.\n- [DATA_EXFILTRATION]: Direct contact handles for Telegram (@Akashneelesh, @adiihq, @starkience) are provided for developer support, representing external communication channels that bypass the agent interface.
Audit Metadata