skills/aibtcdev/skills/erc8004/Gen Agent Trust Hub

erc8004

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill follows best practices for command-line tool development, including strict input validation for numeric IDs and hex-encoded data.
  • [COMMAND_EXECUTION]: Subcommands are managed using the 'commander' library. User-supplied arguments are parsed and validated (e.g., using 'parseInt' for IDs and 'normalizeHex' for cryptographic hashes) before being passed to service layers, effectively preventing command injection.
  • [DATA_EXPOSURE]: The skill handles on-chain transactions requiring an unlocked wallet. It interacts with an abstract 'walletManager' service rather than handling private keys or secrets directly, which is consistent with secure credential management practices.
  • [EXTERNAL_DOWNLOADS]: No external code or unexpected dependencies are downloaded at runtime. The script relies on local services and standard libraries.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 09:10 PM