wagmi
Fail
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: HIGH
Full Analysis
- EXTERNAL_DOWNLOADS (INFO): The skill references standard web3 packages including 'wagmi', '@wagmi/connectors', and '@tanstack/react-query'. These are industry-standard, trusted dependencies for React-based blockchain development.
- COMMAND_EXECUTION (SAFE): No malicious shell commands or arbitrary code execution patterns were found. All code snippets are standard React hooks used for blockchain interactions.
- DATA_EXFILTRATION (SAFE): No unauthorized data access or exfiltration patterns detected. RPC endpoints provided in examples use 'KEY' placeholders and point to standard infrastructure (Alchemy).
- AUTOMATED SCAN REBUTTAL (INFO): The malicious URL alerts for 'arbitrum.id' and 'connector.id' are confirmed false positives. These are code-level property accesses (e.g., accessing a chain ID or a React list key) and not network requests to malicious domains.
Recommendations
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata