evm-foundry
Audited by Socket on Feb 28, 2026
1 alert found:
SecurityThis is a legitimate Foundry/EVM development skill focused on Celo with example contracts, tests, deployment scripts, and instructions. No obfuscated code, hidden backdoors, or explicit exfiltration routines are present in the provided files. The main security considerations are standard for blockchain development: (1) use of curl|bash to install Foundry (an unpinned remote installer — supply-chain risk if the remote host is compromised), and (2) handling of raw private keys and API keys passed via environment variables and CLI options (sensitive credential exposure risk). Those behaviors are coherent with the documented purpose but require standard operational precautions: verify installer integrity where possible, use ephemeral or hardware keys for deployments, restrict file permissions, and avoid sharing environment files. Overall, I do not find evidence of malicious intent in the content; the primary risks are operational and supply-chain related.