entry-point-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands including
rg(ripgrep),grep,awk,find, andcommto analyze local source code and identify function definitions and access modifiers. - [EXTERNAL_DOWNLOADS]: The documentation suggests installing well-known security tools such as
slither-analyzerandsolc-selectviapip, as well as system packages likeripgrepviaaptorbrew. - [INDIRECT_PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests local source code for analysis.
- Ingestion points: Files within the directory specified by
SECSKILL_TARGET(Solidity, Rust, Move, or web API source code). - Boundary markers: None identified in the workflow.
- Capability inventory: Uses subprocesses to run
rg,grep,slither, andsolc-selectfor static analysis. - Sanitization: The skill uses regex-based filtering (
rg,grep) and specialized static analysis tools rather than feeding arbitrary file content directly into the agent's reasoning loop for instruction execution.
Audit Metadata