near-kit

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill instructions describe methods for managing NEAR Protocol account credentials using persistent storage.
  • Evidence: SKILL.md and references/keys-and-testing.md document the use of FileKeyStore, which specifically targets the standard NEAR CLI directory at ~/.near-credentials.
  • Evidence: The NativeKeyStore utility is documented to interact with the macOS Keychain and Windows Credential Manager to manage private keys.
  • [EXTERNAL_DOWNLOADS]: The documentation includes instructions for installing several packages from the NEAR Protocol ecosystem and common React utilities.
  • Evidence: The skill mentions installing near-kit, @near-kit/react, @hot-labs/near-connect, and various @near-wallet-selector modules via standard package managers.
  • [COMMAND_EXECUTION]: The skill provides a sandbox utility for local development that involves running a local blockchain node.
  • Evidence: references/keys-and-testing.md documents the Sandbox class, which uses Sandbox.start() to initialize a local NEAR environment, typically involving the execution of a background process or container.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 04:05 PM