siwe

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides implementation guidelines for Sign-In with Ethereum (SIWE) using the viem library and iron-session for session management. It correctly identifies viem/siwe as the preferred native utility for Scaffold-ETH 2 projects.
  • [SAFE]: It includes critical security recommendations, such as validating the SIWE message domain against the Host header to prevent cross-domain signature replay attacks.
  • [SAFE]: It implements secure session handling by requiring the IRON_SESSION_SECRET environment variable to be at least 32 characters in production environments, while providing a safe fallback for local development.
  • [SAFE]: The skill advocates for standard security practices when verifying signatures from smart contract wallets (ERC-6492) by using specific public clients for supported chains.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 09:23 PM