The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/deploy.py features a function install_dependencies that uses subprocess.check_call to execute pip install commands at runtime if required packages are missing.
[EXTERNAL_DOWNLOADS]: The skill automatically fetches external components at runtime:
It uses pip to download and install web3 and py-solc-x from the Python Package Index (PyPI).
It utilizes the install_solc() function from py-solc-x to download Solidity compiler binaries from remote sources (GitHub) based on a user-provided version string.
[DATA_EXPOSURE]: The deploy_contract tool accepts a file_path parameter which is passed directly to compile_files. This allows the agent to read arbitrary files from the filesystem. If a non-Solidity file (like .env or ~/.ssh/id_rsa) is provided, the resulting error messages or compilation output could leak sensitive file content.
[CREDENTIALS_UNSAFE]: The skill is designed to handle a blockchain private_key as both an environment variable (PRIVATE_KEY) and a tool parameter. While necessary for smart contract deployment, this pattern involves the handling of highly sensitive cryptographic secrets within the agent context.
[DYNAMIC_EXECUTION]: The script employs __import__ for dynamic module checking and loading in scripts/deploy.py during its dependency verification phase.

contract-deployer