sablier-create-vesting
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
castCLI tool (part of the Foundry toolkit) to perform blockchain operations such as querying balances, checking allowances, and broadcasting transactions. - Evidence: The skill relies on multiple shell utilities including
cast,jq,bc,sed,printf, anddatewithinreferences/evm-cli.mdto automate transaction construction and receipt verification. - Guardrails: It implements mandatory user confirmation prompts (
Reply exactly: YES) and prioritizes browser-based signing (--browser), which ensures private keys are not exposed to the agent or terminal. - [EXTERNAL_DOWNLOADS]: The skill references external tools and installation scripts from well-known sources.
- Evidence:
SKILL.mdsuggests installing additional skills vianpxfrom thesablier-labsrepository.references/evm-cli.mddirects users tohttps://getfoundry.sh/to install the required CLI tools. - [PROMPT_INJECTION]: The skill processes user-provided data such as token addresses and vesting details which are subsequently used in shell command arguments.
- Ingestion points:
SKILL.mddefines arguments forchain_name,vested_token_address, andvesting_details. - Boundary markers: The skill does not explicitly use delimiters (like triple quotes or XML tags) to wrap user input in its internal prompts.
- Capability inventory: The skill possesses significant capabilities through shell execution (
cast send, etc.) as documented inreferences/evm-cli.md. - Sanitization: The workflow requires the agent to manually validate inputs, infer intent, and map descriptions to specific ABI functions, which provides a layer of logic-based sanitization, though explicit shell escaping is not mentioned.
Audit Metadata