example-leaderboard-dapp
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a comprehensive and valid workflow for building on the Midnight Network, including project structure, Compact contract logic, and TypeScript witnesses for zero-knowledge proofs.
- [EXTERNAL_DOWNLOADS]: References to external resources, such as the 1AM wallet (1am.dev) and official Midnight Network Docker images (midnightntwrk/proof-server), target established and recognized services within the Midnight ecosystem.
- [SAFE]: The skill implements an architecture where contract state is read via a GraphQL indexer. While this represents an indirect data ingestion point, the processed data (Uint64 and Bytes32) is structured for leaderboard display and does not pose a significant injection risk.
- [SAFE]: The practice of persisting secret keys in browser
localStorageis described as a method for session persistence. While this is a known security trade-off compared to more robust storage solutions, it is a common pattern in decentralized application prototypes and is documented neutrally here as a design choice.
Audit Metadata