blockchain-security
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
py-solc-xlibrary to download and install the Solidity compiler (solc) binaries directly from the official Ethereum project's distribution channels. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted smart contract source code and bytecode during security analysis, which creates a surface for indirect prompt injection.
- Ingestion points: The skill analyzes external contract source code and bytecode as described in the analysis workflow in
SKILL.md. - Boundary markers: No specific boundary markers or instructions are provided to separate analyzed code from execution instructions.
- Capability inventory: The skill has the capability to perform network requests using
curland execute blockchain transactions usingweb3.py. - Sanitization: The skill does not implement validation or sanitization mechanisms for the contract data being analyzed.
Audit Metadata