audit-reports
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [No Code] (SAFE): The skill is comprised entirely of Markdown files, including guidelines, examples, and templates. No executable scripts (Python, JavaScript, Shell) or binaries are included in the skill package.- [Data Exposure] (SAFE): No sensitive file paths, hardcoded credentials, or private API keys were found. The Solidity code snippets in the examples use standard public contract addresses and mock data for demonstration purposes.- [Remote Code Execution] (SAFE): The skill does not contain instructions for the agent to download or execute external code. References to installation commands in the README are intended for the user, not the agent's runtime environment.- [Indirect Prompt Injection] (SAFE): The skill facilitates the processing of user-supplied vulnerability details into formatted reports. Although this involves processing untrusted data, the skill does not provide the agent with elevated capabilities like shell access or file-system modification, ensuring that any potential malicious content in the user data is restricted to the output text.
Audit Metadata