solidity-security
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted smart contract code provided by users, which creates a potential surface for indirect prompt injection.\n
- Ingestion points: User-provided Solidity contracts processed within the SKILL.md instructions and resources/implementation-playbook.md context.\n
- Boundary markers: Absent; there are no explicit delimiters to isolate external code from the agent's internal instructions.\n
- Capability inventory: The skill provides security auditing, vulnerability pattern matching, and implementation recommendations based on the ingested code.\n
- Sanitization: Absent; the skill does not specify filtering or escaping of user-provided content before processing.\n- [SAFE]: The skill provides high-quality educational content and secure coding patterns, such as the Checks-Effects-Interactions pattern, Pull Over Push, and ReentrancyGuard, to help developers prevent common smart contract vulnerabilities.
Audit Metadata