property-based-testing
Fail
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the Foundry development toolset from paradigm.xyz, which is the official distribution site for this well-known suite of Ethereum development tools.\n- [REMOTE_CODE_EXECUTION]: A command is provided to download and execute a shell script from the internet using
curl -L https://foundry.paradigm.xyz | bashto install the Foundry toolchain.\n- [COMMAND_EXECUTION]: The workflow involves using CLI tools such aspip,npm,cargo, andforgeto set up testing environments and run automated tests on the target codebase.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external source files defined by thePBT_TARGET_FILEvariable, which can expose the agent to malicious content embedded in the code.\n - Ingestion points: Files read via the
PBT_TARGET_FILEpath.\n - Boundary markers: None identified in the provided templates or instructions.\n
- Capability inventory: Execution of package managers and test runners on the local system.\n
- Sanitization: No validation or sanitization is performed on the ingested file content.
Recommendations
- HIGH: Downloads and executes remote code from: https://foundry.paradigm.xyz - DO NOT USE without thorough review
Audit Metadata