building-secure-contracts
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a security checklist and workflow guide for contract auditors. It uses standard shell commands and regex patterns (ripgrep) to identify known vulnerable code patterns in various smart contract languages.
- [EXTERNAL_DOWNLOADS]: The instructions recommend installing legitimate, well-known security and development tools from official package registries (PyPI, NPM, Crates.io) and well-known project repositories (e.g., coral-xyz/anchor). These downloads are standard practices for the described audit workflow.
- [COMMAND_EXECUTION]: The skill executes local build and analysis commands (e.g.,
anchor build,scarb lint,tealer,cosmwasm-check) on the source code provided in theSECSKILL_CONTRACT_DIR. All operations are transparent, documented in the workflow, and consistent with the skill's purpose of smart contract security review. - [DATA_EXPOSURE]: The skill reads local contract source files to perform security analysis. It does not perform any network operations that would exfiltrate this data; findings are saved to a local output directory.
Audit Metadata