monad

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs well-known Node.js packages (viem, qrcode-terminal) into a local cache directory (~/.monskills/propose-deps/) to facilitate multisig transaction proposing. It also provides instructions for installing official CLI tools from Envio (envio-cloud) and Para (@getpara/cli).
  • [COMMAND_EXECUTION]: The skill executes local shell commands and scripts to manage the development environment, including using the Foundry toolkit (cast, forge) for blockchain operations and running a local Node.js script (propose.mjs) for multisig transaction management.
  • [DATA_EXFILTRATION]: The skill performs network operations to authorized endpoints required for its functionality: api.safe.global for the Safe Transaction Service, agents.devnads.com for a faucet and contract verification API, and skills.devnads.com for an anonymous feedback pipeline. All communications are consistent with the skill's primary purpose and follow documented privacy practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 09:26 PM
Security Audit — agent-trust-hub — monad