web3-audit
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
grepto identify specific code patterns associated with smart contract vulnerabilities. It also provides instructions for using theFoundry(forge) testing framework to create and run Proof of Concept (PoC) exploits against a local codebase. These are standard tools and practices for security researchers. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze third-party smart contract code, creating a surface where malicious instructions hidden in contract comments or naming conventions could potentially influence the agent's behavior.
- Ingestion points: Smart contract source files located in the
contracts/directory are read and processed. - Boundary markers: Absent; the instructions do not include specific delimiters or warnings to the agent to ignore instructions embedded within the analyzed code.
- Capability inventory: The agent is granted capabilities to perform file system searches (
grep) and execute a blockchain testing environment (forge). - Sanitization: Absent; the skill does not define methods to sanitize or filter the contract code before analysis.
Audit Metadata