kani-proof
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
@workersio/klint, a specialized linter for Kani proofs. This is a vendor-owned package belonging to the skill author (workersio). - [EXTERNAL_DOWNLOADS]: The skill references the
onchorfork of theanchor-langlibrary and theotter-solana-verifytool, both maintained by OtterSec, a well-known security firm in the Solana ecosystem. - [COMMAND_EXECUTION]: The skill executes several legitimate system and tool commands through its sub-agents, including
cargo kanifor verification,npm installandnpxfor tool management, andgrepfor codebase analysis. These are constrained to their primary intended functions within the verification workflow. - [DATA_EXPOSURE]: No hardcoded secrets, private keys, or sensitive environment variable exposure patterns were found. The skill operates on user-provided source code for the purpose of verification.
- [SAFE]: The skill follows security best practices by encouraging the use of small configuration parameters for model checking and providing a linter to detect potential vacuity or logic errors before full verification runs.
Audit Metadata