starknet
Fail
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to a StarkNet faucet at
https://starknet-faucet.vercel.appfor funding testnet accounts. This specific URL has been identified as malicious by automated security scanners (URLite Blacklist). Evidence of this link is found inexamples/deploy-contract/README.mdandSKILL.md. - [REMOTE_CODE_EXECUTION]: The skill instructs the user to install tools such as Scarb, Starknet Foundry, and starkli by piping remote scripts directly to the shell (
curl ... | sh). While these tools are standard in the StarkNet ecosystem and hosted on domains likedocs.swmansion.comor GitHub, this installation method represents a remote code execution risk as it bypasses local integrity checks. Evidence is located in the installation section ofSKILL.md.
Recommendations
- HIGH: Downloads and executes remote code from: https://get.starkli.sh, https://raw.githubusercontent.com/foundry-rs/starknet-foundry/master/scripts/install.sh, https://docs.swmansion.com/scarb/install.sh - DO NOT USE without thorough review
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata