near-kit
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill instructions describe methods for managing NEAR Protocol account credentials using persistent storage.
- Evidence:
SKILL.mdandreferences/keys-and-testing.mddocument the use ofFileKeyStore, which specifically targets the standard NEAR CLI directory at~/.near-credentials. - Evidence: The
NativeKeyStoreutility is documented to interact with the macOS Keychain and Windows Credential Manager to manage private keys. - [EXTERNAL_DOWNLOADS]: The documentation includes instructions for installing several packages from the NEAR Protocol ecosystem and common React utilities.
- Evidence: The skill mentions installing
near-kit,@near-kit/react,@hot-labs/near-connect, and various@near-wallet-selectormodules via standard package managers. - [COMMAND_EXECUTION]: The skill provides a sandbox utility for local development that involves running a local blockchain node.
- Evidence:
references/keys-and-testing.mddocuments theSandboxclass, which usesSandbox.start()to initialize a local NEAR environment, typically involving the execution of a background process or container.
Audit Metadata