metamask-connect
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and secure documentation for the MetaMask Connect SDK.
- [EXTERNAL_DOWNLOADS]: The skill references official MetaMask and trusted third-party resources, such as NPM packages, GitHub repositories, and well-known services like Infura and public blockchain RPC endpoints. These downloads are necessary for the development tasks described and originate from trusted organizations.
- [COMMAND_EXECUTION]: The instructions include standard package management commands (e.g.,
npm install) and blockchain interactions (e.g.,eth_sendTransaction). All sensitive blockchain operations are designed to be routed through the MetaMask wallet, which requires explicit user approval. - [CREDENTIALS_UNSAFE]: The documentation correctly uses placeholders for sensitive information like API keys (e.g., 'YOUR_INFURA_KEY') and explicitly recommends using environment variables for managing secrets in production environments.
Audit Metadata