skills/workersio/spec/kani-proof/Gen Agent Trust Hub

kani-proof

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses @workersio/klint, a specialized linter for Kani proofs. This is a vendor-owned package belonging to the skill author (workersio).
  • [EXTERNAL_DOWNLOADS]: The skill references the onchor fork of the anchor-lang library and the otter-solana-verify tool, both maintained by OtterSec, a well-known security firm in the Solana ecosystem.
  • [COMMAND_EXECUTION]: The skill executes several legitimate system and tool commands through its sub-agents, including cargo kani for verification, npm install and npx for tool management, and grep for codebase analysis. These are constrained to their primary intended functions within the verification workflow.
  • [DATA_EXPOSURE]: No hardcoded secrets, private keys, or sensitive environment variable exposure patterns were found. The skill operates on user-provided source code for the purpose of verification.
  • [SAFE]: The skill follows security best practices by encouraging the use of small configuration parameters for model checking and providing a linter to detect potential vacuity or logic errors before full verification runs.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 04:20 AM