setup-solidity-contracts
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Foundry installation script from 'foundry.paradigm.xyz' using 'curl | bash'. While this pattern executes remote code, it is the official and standard installation procedure for this well-known Ethereum development tool.
- [COMMAND_EXECUTION]: Uses standard package managers including 'npm', 'npx', and 'forge' to initialize projects and manage smart contract dependencies.
- [EXTERNAL_DOWNLOADS]: Installs OpenZeppelin contract libraries directly from the official NPM registry and the author's verified GitHub repositories.
Audit Metadata