erc8004
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill follows best practices for command-line tool development, including strict input validation for numeric IDs and hex-encoded data.
- [COMMAND_EXECUTION]: Subcommands are managed using the 'commander' library. User-supplied arguments are parsed and validated (e.g., using 'parseInt' for IDs and 'normalizeHex' for cryptographic hashes) before being passed to service layers, effectively preventing command injection.
- [DATA_EXPOSURE]: The skill handles on-chain transactions requiring an unlocked wallet. It interacts with an abstract 'walletManager' service rather than handling private keys or secrets directly, which is consistent with secure credential management practices.
- [EXTERNAL_DOWNLOADS]: No external code or unexpected dependencies are downloaded at runtime. The script relies on local services and standard libraries.
Audit Metadata