lucid-agents-sdk

Pass

Audited by Gen Agent Trust Hub on Mar 4, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill describes an architecture where agents ingest and process untrusted data via defined entrypoints, creating an inherent surface for indirect prompt injection.
  • Ingestion points: Data received through addEntrypoint handlers as seen in SKILL.md (e.g., the greet and echo endpoints).
  • Boundary markers: The documentation promotes the use of the zod library for input schema validation.
  • Capability inventory: The framework includes capabilities for HTTP server management, wallet operations, blockchain interactions, and automated payment processing.
  • Sanitization: The framework relies on structured data validation via zod to constrain inputs.
  • [EXTERNAL_DOWNLOADS]: The documentation references the installation of the @lucid-agents SDK packages and well-known dependencies such as zod, hono, and viem from standard package registries.
  • [COMMAND_EXECUTION]: The skill instructions include the use of the @lucid-agents/cli tool for scaffolding projects and the bun runtime for building, testing, and running agent applications.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 4, 2026, 02:15 PM