lightning
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses the create-inco-app utility via npx to scaffold new projects, which is the official initialization method provided by the vendor.
- [EXTERNAL_DOWNLOADS]: The skill depends on official Inco libraries (@inco/lightning, @inco/lightning-js) and standard blockchain development packages (viem, @openzeppelin/contracts) for its core functionality.
- [SAFE]: The instructions and code templates emphasize critical safety patterns for confidential computing, such as handle access control using allowThis() and avoiding branching on ciphertexts.
Audit Metadata