erc-8004
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides documentation and technical reference materials for the ERC-8004 draft EIP. All external links and repository references point to the official project infrastructure and well-known community sites, such as the Ethereum Magicians forum and GitHub organizations for ERC-8004 and Agent0Lab.
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the
agent0-sdkNode.js package, which is the official implementation library for the protocol. It also lists legitimate runtime dependencies such asviem,graphql-request, andipfs-http-client. - [DATA_EXFILTRATION]: Code snippets demonstrate best practices for credential management by using environment variables (e.g.,
process.env.PRIVATE_KEY) for local configuration rather than hardcoding sensitive data. The protocol's use of anagentWalletmetadata field is a transparent and standard way to advertise payment addresses on-chain. - [COMMAND_EXECUTION]: A local validation script is defined in
package.json, which is a routine utility for skill development and does not involve remote execution or untrusted input. - [PROMPT_INJECTION]: No evidence of prompt injection patterns, bypass instructions, or malicious overrides was found in any of the documentation or instructional text.
Audit Metadata