vechain-kit
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive developer guide for implementing VeChain blockchain features in frontend applications. It establishes clear operating procedures for project structure and library selection without including any executable malicious payloads.
- [EXTERNAL_DOWNLOADS]: The documentation includes standard installation commands for official libraries such as
@vechain/vechain-kit,@vechain/dapp-kit-react, and@vechain/contract-getters, along with established peer dependencies like@tanstack/react-queryand@chakra-ui/react. These resources are fetched from standard public registries. - [INDIRECT_PROMPT_INJECTION]: The skill identifies ingestion points for untrusted data, such as contract read results via
useCallClauseand user-supplied wallet metadata. It mitigates risks by recommending typed contract factories and providing structured patterns for data transformation using React Query. Capability inventory is limited to standard blockchain interactions and frontend UI components. (Severity: LOW) - [COMMAND_EXECUTION]: The operating procedure recommends the use of
nvm useand standard build commands likenpm run build. These are routine development tasks and do not involve the execution of untrusted or dynamically generated scripts.
Audit Metadata