midnightskill
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to install the Compact smart contract compiler using a shell script pipe to bash from the official Midnight Network GitHub repository.
- [EXTERNAL_DOWNLOADS]: Fetches various SDKs and dependencies from official package registries (NPM) and the Midnight Network's official GitHub organization.
- [CREDENTIALS_UNSAFE]: Includes hardcoded hex seeds (e.g., all zeros ending in 1) in tutorial and test files. These are documented genesis seeds specifically intended for local development environments and do not represent a risk to production credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill describes methods for querying and processing on-chain contract state via GraphQL. This identifies a standard attack surface for blockchain-ingesting applications, where malicious on-chain data could potentially influence agent behavior if not properly handled during the deserialization and display process.
Audit Metadata