altcha
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily instructional documentation for the
altchaRust library, offering patterns for server and frontend integration. - [SAFE]: External resource references target well-known and trusted services, such as the
altcha-orgGitHub repository and thejsdelivrCDN for the frontend widget. - [SAFE]: The documentation explicitly warns against hardcoding secrets, recommending the use of environment variables and
.envfiles for managing HMAC keys. - [SAFE]: The skill addresses common security pitfalls, providing specific remediation logic for replay attacks (via Redis or in-memory caching) and form-field tampering (via HMAC hashes).
- [SAFE]: A
known-issues.mdfile is included, which demonstrates a high level of transparency by documenting API discrepancies and providing corrected code examples for the developer.
Audit Metadata