mezo
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's operations are consistent with its purpose of protocol integration. No malicious instructions, obfuscation, or persistence mechanisms were detected.
- [EXTERNAL_DOWNLOADS]: The skill references resources from official sources, such as the @mezo-org/passport NPM package and the mezod GitHub repository. These are legitimate dependencies required for the Mezo ecosystem.
- [COMMAND_EXECUTION]: Workflow steps involve standard CLI operations including npm, go, make, and cast. These commands are used transparently for building software and interacting with the blockchain.
- [CREDENTIALS_UNSAFE]: The skill uses environment variable placeholders (e.g., PRIVATE_KEY="0x...") for transaction signing. While handling private keys requires caution, the skill does not contain hardcoded secrets or logic to exfiltrate these credentials.
Audit Metadata