controller-backend
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (MEDIUM): The Rust integration section specifies a dependency sourced directly from a Git repository ('https://github.com/cartridge-gg/controller-rs.git'). Since the 'cartridge-gg' organization is not in the predefined list of trusted sources, this represents an unverifiable external download.\n- [REMOTE_CODE_EXECUTION] (MEDIUM): By using a Git dependency in a Cargo-based project, the skill triggers the download and compilation of remote source code during the build process, which constitutes execution of code from an external, untrusted source.\n- [CREDENTIALS_UNSAFE] (INFO): The code patterns correctly emphasize using environment variables for private keys (e.g., 'env::var("PRIVATE_KEY")'). This is a positive security practice, though the presence of blockchain transaction capabilities requires the agent to be configured with strictly limited permissions.
Audit Metadata