solidity-adversarial-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to process and analyze external Solidity smart contract code. This establishes a vulnerability surface where an attacker could embed malicious instructions or deceptive content within contract comments, documentation, or string literals to attempt to influence the agent's behavior during analysis.
- Ingestion points: The skill ingests untrusted smart contract source code in SKILL.md and referenced files for threat modeling and exploit analysis.
- Boundary markers: The instructions do not define specific delimiters or "ignore instructions" directives for the code being analyzed.
- Capability inventory: The skill leverages static analysis tools (Slither, Aderyn) and automated pattern matching to inspect the ingested data.
- Sanitization: There are no explicit steps described for sanitizing or filtering instructions that might be embedded in the analyzed contracts.
Audit Metadata