deploying-contracts-on-gatelayer

Warn

Audited by Snyk on Feb 28, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 0.80). The SKILL.md "Obtaining Testnet GT" section explicitly tells the agent to navigate to and interact with the public Gatelayer Faucet (https://www.gatescan.org/gatechain-testnet/en/faucet), meaning the agent would fetch and interpret third‑party web content as part of its workflow.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly designed for blockchain operations: it instructs deploying contracts with Foundry's "forge create" (which signs and broadcasts transactions), references RPC endpoints for GateLayer mainnet/testnet, mentions storing/importing private keys (Foundry keystore, cast wallet import), and describes obtaining GT from a faucet to pay gas. These are specific crypto/wallet/transaction-signing capabilities (not generic tooling), so it grants direct financial execution potential.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 28, 2026, 09:49 AM