polygon
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user to install the Foundry toolsuite using a piped shell command:
curl -L https://foundry.paradigm.xyz | bash. This is the official and standard installation method for this industry-standard development tool. - [COMMAND_EXECUTION]: The documentation and examples provide multiple CLI commands for contract interaction, such as
forge create,forge script, andnpx hardhat run, which are standard for smart contract development workflows. - [EXTERNAL_DOWNLOADS]: The skill fetches data from official Polygon infrastructure, including the Proof Generator API (
proof-generator.polygon.technology) and the zkEVM Bridge API (bridge-api.zkevm-rpc.com), to facilitate bridge monitoring and claim verification. - [CREDENTIALS_UNSAFE]: The code templates utilize environment variables (
process.env.PRIVATE_KEY) and suggest the use of.envfiles for managing sensitive keys, which is an established best practice for separating secrets from code in local development.
Audit Metadata