flare-ftso
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: Example scripts utilize environment variables (
ACCOUNT_PRIVATE_KEY) for transaction signing, avoiding hardcoded secrets. The skill includes prominent warnings advising developers to never expose private keys to AI assistants or unvetted automation. - [EXTERNAL_DOWNLOADS]: The documentation references official packages from the Flare Foundation's npm scope (
@flarenetwork/*) and established industry libraries such asweb3,wagmi, andviem. These downloads target official registries and trusted vendor infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill explicitly identifies blockchain oracle data as untrusted external content. It provides clear architectural guidance on isolating this data from natural language processing pipelines and utilizing cryptographic Merkle proofs for verification.
- [COMMAND_EXECUTION]: Development instructions reference standard Ethereum tooling such as Hardhat and Foundry. These commands are provided as read-only references for developers to execute in their own managed environments and do not involve autonomous execution by the agent.
Audit Metadata