foundry

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documents the official installation method for the Foundry toolkit via curl -L https://foundry.paradigm.xyz | bash. This targets the well-known and reputable official domain for the Foundry development suite.
  • [COMMAND_EXECUTION]: Includes a project bootstrap shell script (templates/project-setup.sh) that automates the initialization of development environments. The script uses standard commands (mkdir, cd, cat) and invokes the forge CLI to manage project structures and dependencies.
  • [CREDENTIALS_UNSAFE]: The documentation and example scripts correctly handle sensitive information by instructing users to use environment variables (vm.envUint("PRIVATE_KEY")) and .env files for private keys. The provided setup script specifically includes a .gitignore entry to prevent accidental exposure of these secrets.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of industry-standard smart contract libraries, such as OpenZeppelin and Solmate, directly from their official GitHub repositories using the forge install command.
  • [COMMAND_EXECUTION]: The troubleshooting guide and configuration reference provide explicit warnings regarding the security implications of enabling Foreign Function Interface (FFI), noting that it allows the execution of arbitrary shell commands and should only be used with trusted code.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 12:30 AM
Security Audit — agent-trust-hub — foundry