nft-development

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were identified within the skill instructions, configuration files, or supporting scripts.
  • [DATA_EXFILTRATION]: A troubleshooting command in SKILL.md references the official OpenSea API for metadata refreshing. As OpenSea is a well-known service in the NFT ecosystem, this network operation is categorized as safe and functional.
  • [DYNAMIC_EXECUTION]: The validation script scripts/validate.py uses the yaml.safe_load() method to process configuration files, which is a secure practice that prevents arbitrary code execution during parsing.
  • [COMMAND_EXECUTION]: The skill documentation includes benign examples of curl and bash for standard development workflows, such as refreshing metadata or running validation scripts locally.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 12:32 AM