dapp-integration

Pass

Audited by Gen Agent Trust Hub on Feb 21, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill references multiple packages under the @midnight-ntwrk scope (e.g., @midnight-ntwrk/dapp-connector-api, @midnight-ntwrk/midnight-js-contracts). While this organization is not on the predefined trusted list, these are the official libraries for the Midnight blockchain. Their inclusion is essential for the skill's primary purpose and follows standard development practices.
  • [DATA_EXFILTRATION] (SAFE): No hardcoded credentials or sensitive file access patterns were identified. The network endpoints provided (e.g., indexer.testnet-02.midnight.network) are public infrastructure for the Midnight testnet. The use of localhost:6300 for a proof server is a standard local development requirement for Zero-Knowledge proof generation.
  • [PROMPT_INJECTION] (SAFE): The instructions and metadata are strictly technical and instructional. There are no attempts to override agent behavior, bypass safety filters, or extract system prompts.
  • [COMMAND_EXECUTION] (SAFE): Shell commands are limited to project initialization (npx create-next-app), dependency management (npm install), and contract compilation via the specialized compact CLI. None of these involve piping remote scripts directly to a shell or other high-risk execution methods.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 21, 2026, 10:24 AM