seeker-genesis-token
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for Web3 authentication by requiring server-side validation of signatures and token ownership. Entitlement decisions are explicitly instructed to be handled on the backend to prevent client-side tampering or bypasses.
- [EXTERNAL_DOWNLOADS]: The implementation utilizes standard, official Solana development libraries (@solana/web3.js, @solana/spl-token, and @solana/wallet-standard-util) from public package registries.
- [COMMAND_EXECUTION]: Instructions include standard package manager commands (npm install) to set up necessary dependencies for blockchain interaction.
- [DATA_EXFILTRATION]: Network communication is directed to Solana RPC providers for the purpose of checking blockchain state, which is necessary for the skill's stated functionality. The skill also provides explicit advice on keeping RPC API keys secure on the server and avoiding exposure in client-side environment variables.
- [SAFE]: The verification logic includes robust protections against replay attacks by using server-issued nonces and binding signatures to specific domains and timestamps.
Audit Metadata