erc-8004
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
agent0-sdknpm package, which is the core library for the ERC-8004 protocol. - [COMMAND_EXECUTION]: Provides standard commands for package management such as
npm install agent0-sdkto set up the development environment. - [CREDENTIALS_UNSAFE]: The documentation explicitly instructs developers to handle sensitive data, including blockchain private keys and IPFS access tokens, via environment variables (
process.env.PRIVATE_KEY,process.env.PINATA_JWT), which is a standard security best practice. - [DATA_EXFILTRATION]: The skill facilitates the transmission of agent metadata and reputation feedback to public blockchains and decentralized storage (IPFS). These operations are essential to the protocol's function of on-chain identity and discovery.
- [SAFE]: The skill architecture includes surface areas for ingesting external data (e.g., fetching tools from MCP endpoints or skills from A2A cards). While these represent ingestion points for untrusted data, they are necessary for the protocol's interoperability and are documented as core features of the discovery system.
Audit Metadata