scaffold

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the OpenZeppelin contracts library from its official GitHub repository using the forge install command. OpenZeppelin is a standard, well-known library for smart contract development.
  • [COMMAND_EXECUTION]: Uses curl to transmit contract verification data (source code, metadata, and deployment details) to the agents.devnads.com API. This is a legitimate step for developers wishing to verify their contracts on block explorers.
  • [COMMAND_EXECUTION]: Instructs the agent to execute various shell commands for project initialization (git init), configuration management (jq), and smart contract management (forge). It also utilizes npx create-next-app, which is a standard tool from Vercel (a well-known service).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 06:10 AM