foundry-cast

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill prompt instructs the agent to use --private-key 0xYOURKEY as a command-line argument for the cast send command, which encourages passing private keys directly in generated commands.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documents Foundry's cast command-line utility for interacting with Ethereum-compatible chains. It includes capabilities for sending blockchain transactions (specifically cast send which signs and broadcasts transactions using a private key and RPC URL), falling under the crypto/blockchain execution criteria (wallets, swaps, signing, transactions).