trustless-work-dev
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were detected. The skill is primarily a documentation and reference implementation resource for developers.
- [EXTERNAL_DOWNLOADS]: The skill references NPM packages under the
@trustless-workscope and provides configuration for MCP servers hosted on thetrustlesswork.comdomain. These resources belong to the official vendor infrastructure and are legitimate for the skill's purpose. - [COMMAND_EXECUTION]: Documentation provides instructions for using a developer CLI (
npx trustless-work init,npx trustless-work add) to set up UI components and providers in a local project. These are standard developer tools for the library. - [DATA_EXPOSURE]: The instructions explicitly emphasize security best practices, such as handling API keys via environment variables and ensuring Stellar secret keys never leave the user's wallet.
Audit Metadata