The Agent Skills Directory

[SAFE]: The skill is a legitimate development tool for auditing smart contracts. It uses parallel agents (Sonnet and Opus models) to perform domain-specific security checks.
[EXTERNAL_DOWNLOADS]: The skill performs an update check by fetching a version number from the author's GitHub repository (github.com/sanbir/solidity-auditor-skills). This is a standard vendor resource and does not involve the execution of remote code.
[COMMAND_EXECUTION]: Uses standard system tools (find, cat, mktemp) for file discovery and internal workspace management. These operations are within the expected scope of a codebase auditing tool.
[PROMPT_INJECTION]: The skill processes untrusted Solidity files during its audit workflow, which introduces an indirect prompt injection surface. However, the orchestrator uses structured delimiters, such as path headers and Markdown code blocks, to isolate the source code from instructions. This is an inherent property of auditing tools and is managed through structured bundling.

solidity-auditor