skills/pashov/skills/solidity-auditor/Gen Agent Trust Hub

solidity-auditor

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted Solidity source code, which could contain comments or strings with prompt injection payloads intended to influence the AI agents.
  • Ingestion points: The skill reads project Solidity files using shell commands like find and cat.
  • Boundary markers: Ingested files are wrapped in headers and markdown code blocks in the temporary audit bundle.
  • Capability inventory: The orchestrator executes shell commands and calls multiple external AI agents with different specialty prompts.
  • Sanitization: The skill does not filter input code for injection payloads, relying instead on agent instructions to operate in a read-only capacity.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 07:21 PM