scaffold
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the OpenZeppelin contracts library from its official GitHub repository using the
forge installcommand. OpenZeppelin is a standard, well-known library for smart contract development. - [COMMAND_EXECUTION]: Uses
curlto transmit contract verification data (source code, metadata, and deployment details) to theagents.devnads.comAPI. This is a legitimate step for developers wishing to verify their contracts on block explorers. - [COMMAND_EXECUTION]: Instructs the agent to execute various shell commands for project initialization (
git init), configuration management (jq), and smart contract management (forge). It also utilizesnpx create-next-app, which is a standard tool from Vercel (a well-known service).
Audit Metadata