foundry
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the official installation method for the Foundry toolkit via
curl -L https://foundry.paradigm.xyz | bash. This targets the well-known and reputable official domain for the Foundry development suite. - [COMMAND_EXECUTION]: Includes a project bootstrap shell script (
templates/project-setup.sh) that automates the initialization of development environments. The script uses standard commands (mkdir,cd,cat) and invokes theforgeCLI to manage project structures and dependencies. - [CREDENTIALS_UNSAFE]: The documentation and example scripts correctly handle sensitive information by instructing users to use environment variables (
vm.envUint("PRIVATE_KEY")) and.envfiles for private keys. The provided setup script specifically includes a.gitignoreentry to prevent accidental exposure of these secrets. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of industry-standard smart contract libraries, such as OpenZeppelin and Solmate, directly from their official GitHub repositories using the
forge installcommand. - [COMMAND_EXECUTION]: The troubleshooting guide and configuration reference provide explicit warnings regarding the security implications of enabling Foreign Function Interface (FFI), noting that it allows the execution of arbitrary shell commands and should only be used with trusted code.
Audit Metadata