lucid-agents-sdk
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill describes an architecture where agents ingest and process untrusted data via defined entrypoints, creating an inherent surface for indirect prompt injection.
- Ingestion points: Data received through
addEntrypointhandlers as seen inSKILL.md(e.g., thegreetandechoendpoints). - Boundary markers: The documentation promotes the use of the
zodlibrary for input schema validation. - Capability inventory: The framework includes capabilities for HTTP server management, wallet operations, blockchain interactions, and automated payment processing.
- Sanitization: The framework relies on structured data validation via
zodto constrain inputs. - [EXTERNAL_DOWNLOADS]: The documentation references the installation of the
@lucid-agentsSDK packages and well-known dependencies such aszod,hono, andviemfrom standard package registries. - [COMMAND_EXECUTION]: The skill instructions include the use of the
@lucid-agents/clitool for scaffolding projects and thebunruntime for building, testing, and running agent applications.
Audit Metadata