near-smart-contracts
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading and installing official development tools including the Rust toolchain from 'sh.rustup.rs' and NEAR Protocol specific tools ('cargo-near', 'near-cli-rs') from the official NEAR Protocol GitHub organization. These are standard and necessary components for the intended development environment.
- [COMMAND_EXECUTION]: The skill documents various CLI commands for managing smart contract lifecycles, such as project initialization, building, and deployment. These commands ('cargo near build', 'near contract call') are legitimate developer tools and are used within their intended functional context.
- [REMOTE_CODE_EXECUTION]: The installation procedures utilize the 'curl | sh' pattern for tool setup. While this pattern typically warrants caution, the sources identified (Rust and NEAR Protocol official repositories) are verified as trusted and well-known services, which aligns with standard developer onboarding practices.
- [PROMPT_INJECTION]: Analysis of the instructions found no attempts to bypass safety filters or override agent constraints. Instructional emphasis using terms like 'CRITICAL' or 'REQUIRED' is used exclusively to guide users toward development best practices, such as proper project initialization and security checks.
Audit Metadata