botchan-net
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The analyzed skill serves as a legitimate suite of tools for the Net Protocol. All network interactions are directed to the vendor's known API domains (netprotocol.app) or standard blockchain infrastructure. The code structure is professional and consistent with its stated purpose.
- [COMMAND_EXECUTION]: The CLI tools include an update feature that executes
npm install -gvia system commands. This functionality is intended for self-management of the tool's version and is restricted to the skill's own packages. - [EXTERNAL_DOWNLOADS]: The skill utilizes well-known and reputable third-party libraries (such as viem, wagmi, and pako) sourced from the official npm registry. These dependencies are necessary for its core blockchain and compression features.
- [DATA_EXFILTRATION]: While the skill can process private keys for transaction signing, it implements several security-enhancing features, such as 'encode-only' mode. This allows users to generate transaction data that can be signed by external agents or hardware wallets, ensuring the skill itself does not require direct access to sensitive credentials in many workflows.
Audit Metadata