flare-fdc

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [NO_CODE]: The skill does not include any executable scripts, binaries, or platform-specific tools. It is composed exclusively of Markdown documentation (SKILL.md and reference.md).
  • [EXTERNAL_DOWNLOADS]: The skill references official Flare documentation (dev.flare.network) and starter repositories on GitHub (github.com/flare-foundation). These resources are owned by the verified author and serve as legitimate development references.
  • [CREDENTIALS_UNSAFE]: The skill provides instructions for managing API keys (VERIFIER_API_KEY_TESTNET, VERIFIER_API_KEY_MAINNET) via .env files. This is consistent with standard development practices for credential management in local environments.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes processes for ingesting external data (FDC attestation responses). It proactively addresses security risks by instructing developers to treat this data as untrusted, decode it strictly via ABI schemas, and explicitly avoid passing it into LLM prompts or decision logic.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 02:03 PM