web3-audit

SUSPICIOUS overall due to its offensive security focus for AI agents: it meaningfully enables exploit discovery and validation workflows against live smart contracts, even though the documentation is internally consistent with that purpose. No malware indicators, credential theft, hidden exfiltration, or dangerous pre-execution directives were found; the main risk is capability abuse plus optional reliance on external tooling and RPC endpoints outside this skill.