self-relay-hyperlane-message
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands to interact with the Hyperlane monorepo and CLI. Specifically, it uses
git rev-parse --show-toplevelto locate the project root andpnpmto execute the Hyperlane CLI tool. - [DATA_EXPOSURE]: The skill manages a private key (HYP_KEY) for signing blockchain transactions. It correctly advises using environment variables rather than hardcoding secrets, which is a standard security practice for blockchain tooling.
- [EXTERNAL_DOWNLOADS]: The skill interacts with the Hyperlane Explorer GraphQL API to fetch message metadata. This is a legitimate functional requirement for identifying the message state and origin chain.
- [PRIVILEGE_ESCALATION]: The skill starts a local HTTP registry on port 3333 to manage RPC connections. This is a local development service and does not involve elevated system privileges like sudo.
Audit Metadata