example-leaderboard-dapp

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a comprehensive and valid workflow for building on the Midnight Network, including project structure, Compact contract logic, and TypeScript witnesses for zero-knowledge proofs.
  • [EXTERNAL_DOWNLOADS]: References to external resources, such as the 1AM wallet (1am.dev) and official Midnight Network Docker images (midnightntwrk/proof-server), target established and recognized services within the Midnight ecosystem.
  • [SAFE]: The skill implements an architecture where contract state is read via a GraphQL indexer. While this represents an indirect data ingestion point, the processed data (Uint64 and Bytes32) is structured for leaderboard display and does not pose a significant injection risk.
  • [SAFE]: The practice of persisting secret keys in browser localStorage is described as a method for session persistence. While this is a known security trade-off compared to more robust storage solutions, it is a common pattern in decentralized application prototypes and is documented neutrally here as a design choice.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 06:33 PM
Security Audit — agent-trust-hub — example-leaderboard-dapp