kleros-ipfs-upload

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs network operations to kleros-ipfs-gateway.fly.dev and cdn.kleros.link to upload and retrieve files. These are documented service endpoints for the Kleros ecosystem.
  • [COMMAND_EXECUTION]: Includes bundled TypeScript scripts that use npm and tsx to perform file uploads. The scripts read local files provided by the user and send them to the gateway, which is the core functionality of the skill.
  • [DATA_EXFILTRATION]: While the skill reads local data and sends it over the network, this is its primary stated purpose. The target is a specific, project-associated gateway for IPFS pinning.
  • [CREDENTIALS_UNSAFE]: The instructions and scripts utilize environment variables for sensitive private keys and API credentials, following standard developer security practices. No hardcoded secrets were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 04:05 PM