permissioned-pools-deployer
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill mandates a safety gate via
AskUserQuestion, requiring explicit user acknowledgment before generating any commands that interact with the blockchain. - [SAFE]: Robust input validation is implemented for all configuration fields, using specific regular expressions for Ethereum addresses and transaction hashes, and strictly forbidding shell metacharacters to prevent command injection.
- [SAFE]: Security best practices for private key management are enforced by prohibiting the
--private-keyflag and recommending hardware wallets or encrypted keystores. - [SAFE]: The skill correctly sources deployment addresses from official vendor repositories, adhering to secure reference practices for protocol deployments.
- [INDIRECT_PROMPT_INJECTION]: Potential risks from untrusted configuration files are addressed by a clear evidence chain: ingestion from config files, boundary markers via user question gates, limited tool capabilities using Foundry, and robust sanitization via metacharacter rejection.
- [DYNAMIC_EXECUTION]: The skill generates Foundry Solidity scripts from local templates, which is a safe practice for complex deployments when combined with thorough input validation and manual execution steps.
Audit Metadata