web3-smart-contract

SUSPICIOUS. The skill is internally coherent and mostly uses official tooling, but it materially equips an AI agent with offensive security capabilities by generating exploit PoCs and running audit workflows against smart contracts. No clear credential harvesting or exfiltration is present; the main risks are agent-enabled security testing and the official-but-risky Foundry curl|bash bootstrap.