property-based-testing
Fail
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill facilitates the installation of the Foundry development toolkit by fetching a script from the paradigm.xyz domain and piping it to the shell. This follows the official installation method for this well-known development tool.
- [EXTERNAL_DOWNLOADS]: The instructions involve downloading and installing standard testing libraries from official registries, including 'hypothesis' via pip and 'fast-check' via npm.
- [COMMAND_EXECUTION]: The skill requires the execution of shell commands to install dependencies and run test suites (e.g.,
forge test,pytest,go test) across several language environments. - [PROMPT_INJECTION]: An indirect prompt injection surface is present.
- Ingestion points: Untrusted data enters the context via the user-provided source files or contracts specified in
PBT_TARGET_FILE(SKILL.md). - Boundary markers: No explicit markers or instructions to ignore embedded instructions in the target files were identified.
- Capability inventory: The skill executes shell-based testing frameworks and installation commands (SKILL.md).
- Sanitization: No evidence of input sanitization or validation for the processed source files was found.
Recommendations
- HIGH: Downloads and executes remote code from: https://foundry.paradigm.xyz - DO NOT USE without thorough review
Audit Metadata