nft-development
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified within the skill instructions, configuration files, or supporting scripts.
- [DATA_EXFILTRATION]: A troubleshooting command in SKILL.md references the official OpenSea API for metadata refreshing. As OpenSea is a well-known service in the NFT ecosystem, this network operation is categorized as safe and functional.
- [DYNAMIC_EXECUTION]: The validation script
scripts/validate.pyuses theyaml.safe_load()method to process configuration files, which is a secure practice that prevents arbitrary code execution during parsing. - [COMMAND_EXECUTION]: The skill documentation includes benign examples of
curlandbashfor standard development workflows, such as refreshing metadata or running validation scripts locally.
Audit Metadata