blockchain-developer
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill architecture is susceptible to indirect prompt injection due to its role in processing untrusted external data.
- Ingestion points: The skill ingests user requirements, project goals, and potentially existing smart contract code or documentation (e.g.,
resources/implementation-playbook.md) to generate development artifacts. - Boundary markers: The instructions lack explicit boundary markers or directives to treat external content as untrusted data or to ignore embedded instructions within processed codebases.
- Capability inventory: The skill is designed to operate within a development environment with capabilities for file system modification, smart contract compilation, and shell execution for testing (e.g., Hardhat, Foundry, Anchor).
- Sanitization: There is no evidence of sanitization, validation, or escaping of external inputs before they are incorporated into the agent's context or generated outputs.
Audit Metadata