The Agent Skills Directory

[SAFE]: The skill demonstrates secure development practices, particularly in its example scripts and documentation, by emphasizing the use of environment variables for managing sensitive blockchain credentials rather than hardcoding them.
[EXTERNAL_DOWNLOADS]: The skill references established Starknet infrastructure services, including Lava Network for RPC access and AVNU for Paymaster functionality. These are well-known services within the ecosystem and are documented neutrally as intended configuration options.
[PROMPT_INJECTION]: As a tool for blockchain interaction, the skill naturally ingests data from external RPC providers, creating a surface for indirect prompt injection (tool output poisoning). However, the inclusion of a dedicated 'Provider Hardening' guide—which details strategies for verifying chain IDs, managing timeouts, and handling RPC inconsistencies—effectively mitigates the risks associated with processing untrusted chain data.

starknet-js