web3-testing
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational content and code templates for smart contract testing. No security violations were detected.
- [CREDENTIALS_UNSAFE]: The configuration examples correctly utilize
process.envfor sensitive data such as private keys and API keys, which is a standard security best practice to avoid hardcoding credentials. - [EXTERNAL_DOWNLOADS]: The skill references standard Node.js packages (e.g.,
@nomicfoundation/hardhat-toolbox) and Foundry (Forge) tools which are widely accepted in the Ethereum development ecosystem. A reference to an Alchemy RPC URL for mainnet forking points to a well-known service. - [DATA_EXFILTRATION]: No patterns of unauthorized data access or external transmission of sensitive information were found. Access to environment variables is scoped to the configuration of testing tools.
- [COMMAND_EXECUTION]: The CI/CD section includes standard build and test commands (
npx hardhat test,npm install). These are routine for the skill's stated purpose of contract verification and testing.
Audit Metadata