hardhat
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a educational resource and template provider for Ethereum development. All code examples and instructions follow industry standards for security and project management.
- [CREDENTIALS_UNSAFE]: The skill demonstrates safe secret management by using environment variable references (e.g.,
process.env.DEPLOYER_PRIVATE_KEY) rather than hardcoding sensitive data. This is correctly identified as a best practice in the documentation. - [COMMAND_EXECUTION]: The shell commands provided (e.g.,
npx hardhat test,npx hardhat ignition deploy) are standard and necessary for the intended use of the Hardhat toolchain. No suspicious or obfuscated commands were identified. - [EXTERNAL_DOWNLOADS]: External references point to official and well-known services such as Etherscan, Alchemy, Infura, and OpenZeppelin. These are standard resources for blockchain developers and do not pose a security risk in this context.
Audit Metadata