hardhat
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation references downloading the 'forge-std' library directly from the 'foundry-rs' GitHub repository (e.g.,
npm add --save-dev 'github:foundry-rs/forge-std#v1.9.7'). This is a well-known and standard dependency in the Ethereum development ecosystem used for Solidity assertions. - [COMMAND_EXECUTION]: The skill mentions the 'ffi' (Foreign Function Interface) cheatcode in Hardhat's Solidity testing environment. This feature allows tests to execute external binaries on the host machine. While powerful, it is a documented feature of the tool and is disabled by default in the Hardhat configuration.
- [SAFE]: The skill explicitly instructs users on secure credential management, advocating for the use of
configVariableand thehardhat-keystoreplugin to handle private keys and API keys. This prevents sensitive information from being hardcoded in configuration files or exposed in environment variables.
Audit Metadata