dapp-common-skill
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation, architectural patterns, and code snippets for DApp development. The content is educational and aligns with standard industry practices.
- [EXTERNAL_DOWNLOADS]: The instructions recommend the installation of widely-used and reputable libraries such as Wagmi, Viem, Ethers.js, RainbowKit, and WalletConnect via standard package managers. These are essential tools for the stated purpose of the skill.
- [CREDENTIALS_UNSAFE]: The skill follows security best practices by instructing users to store sensitive information, specifically the WalletConnect Project ID, in environment variables (
.envfiles) rather than hardcoding them in the source code. It also includes warnings against using placeholder IDs in production. - [PROMPT_INJECTION]: No patterns indicative of prompt injection, jailbreaking, or attempts to bypass AI safety guidelines were found. The instructional tone is helpful and focused on developer guidance.
- [DATA_EXFILTRATION]: No suspicious network operations or attempts to access sensitive local files (like SSH keys or AWS credentials) were detected. Communication with external services is limited to standard blockchain RPC providers and block explorers.
- [COMMAND_EXECUTION]: The skill does not contain any dangerous shell commands, privilege escalation attempts, or unauthorized persistence mechanisms.
Audit Metadata