Security audit

Setup Solidity Contracts

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent Solidity setup guide, but it tells users or agents to run a mutable remote installer directly through Bash.

Review this skill before installing. The Solidity guidance is otherwise straightforward, but do not run the Foundry `curl | bash` installer unless you are comfortable executing third-party shell code; prefer a pinned, verified Foundry release or inspect the installer first.

A.I.G

Vulnerability Patterns

Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

Findings (1)

T03 · Remote Payload Retrieval and Execution

Error

Location: SKILL.md:39
Finding: Unverified Remote Installer Piped Directly to Bash
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

External Script Fetching

High

Category: Supply Chain
Confidence: 98% confidence
Finding: Piping a remote script directly into bash executes code from the network without prior verification, integrity checking, or meaningful user review. If the remote host, transport path, or served script is compromised, users following the skill could run arbitrary attacker-controlled code on their machines.
Content: Scanner excerpt · SKILL.md (reported line 39)May include surrounding context.

Install Foundry

bash
curl -L https://foundry.paradigm.xyz | bash foundryup

Chaining Abuse

High

Category: Tool Misuse
Confidence: 99% confidence
Finding: The | bash construct removes the opportunity for inspection and compounds the danger of remote script fetching by immediately executing whatever bytes are returned. In a developer setup skill, this is especially risky because users are likely to copy-paste commands verbatim into privileged local environments.
Content: Scanner excerpt · SKILL.md (reported line 39)May include surrounding context.

Install Foundry

bash
curl -L https://foundry.paradigm.xyz | bash foundryup

Rp1

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.

Rp1

Medium

Category: MCP Rug Pull
Confidence: 70% confidence
Finding: npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
Content: No source excerpt is available for this finding.