blockchain-security

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the py-solc-x library to download and install the Solidity compiler (solc) binaries directly from the official Ethereum project's distribution channels.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted smart contract source code and bytecode during security analysis, which creates a surface for indirect prompt injection.
  • Ingestion points: The skill analyzes external contract source code and bytecode as described in the analysis workflow in SKILL.md.
  • Boundary markers: No specific boundary markers or instructions are provided to separate analyzed code from execution instructions.
  • Capability inventory: The skill has the capability to perform network requests using curl and execute blockchain transactions using web3.py.
  • Sanitization: The skill does not implement validation or sanitization mechanisms for the contract data being analyzed.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:39 AM