engineering-solidity-smart-contract-engineer
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists primarily of documentation, Solidity code templates, and a standard shell wrapper script.
- [NO_CODE]: The provided Solidity contracts are templates for the agent to use when generating code, not scripts that execute on the host system.
- [COMMAND_EXECUTION]: The
scripts/run.shfile contains standard shell commands to invoke a local Python runner (run-skill.py). It uses best practices likeset -euo pipefailand proper variable quoting. It does not perform any network operations or access sensitive system paths. - [PROMPT_INJECTION]: The instructions in
SKILL.mdare focused on establishing a professional persona and enforcing security best practices for smart contract development. No adversarial patterns or attempts to bypass LLM safety filters were found. - [DATA_EXPOSURE]: There are no hardcoded credentials, sensitive file paths, or network exfiltration patterns present in the files.
Audit Metadata