skills/circlefin/skills/use-arc/Gen Agent Trust Hub

use-arc

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs the user or agent to install the Foundry development suite using the command curl -L https://foundry.paradigm.xyz | bash. This is the standard, well-documented installation method for a widely used industry tool provided by a reputable organization (Paradigm). Under the [TRUST-SCOPE-RULE], references to well-known technology services are considered safe.
  • [EXTERNAL_DOWNLOADS]: References official Circle and Arc resources, including the RPC endpoints (rpc.testnet.arc.network), the block explorer (testnet.arcscan.app), and developer documentation. These are all vendor-owned resources consistent with the skill's purpose.
  • [CREDENTIALS_UNSAFE]: While the skill mentions the use of a PRIVATE_KEY for contract deployment, it provides explicit and robust security rules. It mandates the use of environment variables, warns against hardcoding secrets, and prohibits passing keys as plain-text CLI flags in non-local environments, which aligns with security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 10:01 PM