metaplex
Fail
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
https://devnet.irys.xyzfor uploading NFT metadata to the Arweave blockchain. This is the official developer endpoint for Irys (formerly Bundlr), which is the standard infrastructure provider for permanent storage in the Metaplex ecosystem. - [EXTERNAL_DOWNLOADS]: The instructions and examples reference standard Solana blockchain infrastructure, including RPC endpoints (
api.mainnet-beta.solana.com,api.devnet.solana.com) and the Arweave gateway (arweave.net). - [SAFE]: All dependencies listed in the installation guides and examples are official packages from the
@metaplex-foundationscope, which is the legitimate organization for the protocol. - [SAFE]: The example code follows secure development practices by using environment variables (
process.env.WALLET_SECRET_KEY) for private key handling instead of hardcoding secrets. - [SAFE]: The skill does not contain any obfuscated code, persistence mechanisms, or unauthorized command execution patterns.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata