flare-ftso
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: References official packages such as
@flarenetwork/flare-periphery-contractsand@flarenetwork/flare-periphery-contract-artifactsfrom the vendor's own NPM registry space. - [EXTERNAL_DOWNLOADS]: Links to official documentation and starter repositories on
dev.flare.networkandgithub.com/flare-foundation/*. - [CREDENTIALS_UNSAFE]: The script
scripts/make-volatility-incentive.tsincludes logic to read a private key from an environment variable (ACCOUNT_PRIVATE_KEY) for transaction signing. This is a standard pattern for blockchain development scripts, and the skill provides clear warnings that private keys must never be exposed to AI assistants or unvetted automation. - [COMMAND_EXECUTION]: Documents standard development commands for compiling and running scripts, such as
npx hardhat compile,forge build, andnpx ts-node. - [DATA_EXFILTRATION]: Network activity is restricted to communicating with official Flare network RPC endpoints (e.g.,
coston2-api.flare.network) to fetch oracle data or submit transactions.
Audit Metadata