meme-coin-audit
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands (grep) and local Python scripts (tools/token_scanner.py) to perform automated security scans on source code. While these are intended for auditing, they represent a functional capability to interact with the local operating system and file structure.- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze untrusted code from external projects, creating a surface where malicious code could influence the agent's behavior.
- Ingestion points: Direct analysis of untrusted source files in src/, contracts/, and programs/ directories (SKILL.md).
- Boundary markers: The documentation lacks specific delimiters or prompt engineering instructions to prevent the agent from accidentally following natural language commands embedded in the code being audited.
- Capability inventory: The agent can execute shell commands, run local Python scripts, and write generated reports to the findings/ directory (SKILL.md).
- Sanitization: Input source code is processed for vulnerabilities without prior sanitization of the content to filter for prompt injection patterns.
Audit Metadata