initia-appchain-dev
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads developer tools and binaries from the official
initia-labsGitHub organization, including theweaveCLI and theinitiadnode binary. - [REMOTE_CODE_EXECUTION]: During environment setup, the skill clones official Initia virtual machine repositories (
minimove,minievm,miniwasm) and builds them from source usingmake install. This is standard procedure for blockchain development environments. - [COMMAND_EXECUTION]: Several helper scripts automate local tasks such as address conversion, account funding, and project scaffolding. These scripts use standard system commands like
chmodandsudo(specifically for installingjqvia the system package manager). - [CREDENTIALS_SAFE]: The skill manages development mnemonics for local testing. The
generate-system-keys.pyscript includes a security mechanism that prevents mnemonics from being printed to the console unless an output file is explicitly specified, and it sets restricted file permissions (0600) on generated secret files.
Audit Metadata