engineering-solidity-smart-contract-engineer

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists primarily of documentation, Solidity code templates, and a standard shell wrapper script.
  • [NO_CODE]: The provided Solidity contracts are templates for the agent to use when generating code, not scripts that execute on the host system.
  • [COMMAND_EXECUTION]: The scripts/run.sh file contains standard shell commands to invoke a local Python runner (run-skill.py). It uses best practices like set -euo pipefail and proper variable quoting. It does not perform any network operations or access sensitive system paths.
  • [PROMPT_INJECTION]: The instructions in SKILL.md are focused on establishing a professional persona and enforcing security best practices for smart contract development. No adversarial patterns or attempts to bypass LLM safety filters were found.
  • [DATA_EXPOSURE]: There are no hardcoded credentials, sensitive file paths, or network exfiltration patterns present in the files.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 10:48 PM