smart-contracts

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a comprehensive documentation suite for Stellar smart contract development in Rust.
  • [COMMAND_EXECUTION]: Provides standard CLI instructions for using stellar-cli to build, deploy, and interact with smart contracts. These are legitimate developer tools.
  • [EXTERNAL_DOWNLOADS]: References external tools like cargo-fuzz, cargo-scout-audit, and cargo-mutants from standard registries (crates.io) and official packages from the Stellar ecosystem. All external links point to trusted organizations (Stellar, OpenZeppelin) or well-known development platforms (GitHub, crates.io).
  • [INDIRECT_PROMPT_INJECTION]: The skill explicitly addresses the security risks of processing untrusted data in smart contracts. It provides a dedicated security.md file and extensive instructions on using boundary markers such as require_auth() and sanitization techniques like checked arithmetic to mitigate these risks.
  • [DATA_EXFILTRATION]: No sensitive data exposure or exfiltration patterns were found. The instructions focus on blockchain-specific operations within the sandboxed Soroban environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 08:29 AM
Security Audit — agent-trust-hub — smart-contracts