siwe
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides implementation guidelines for Sign-In with Ethereum (SIWE) using the
viemlibrary andiron-sessionfor session management. It correctly identifiesviem/siweas the preferred native utility for Scaffold-ETH 2 projects. - [SAFE]: It includes critical security recommendations, such as validating the SIWE message domain against the
Hostheader to prevent cross-domain signature replay attacks. - [SAFE]: It implements secure session handling by requiring the
IRON_SESSION_SECRETenvironment variable to be at least 32 characters in production environments, while providing a safe fallback for local development. - [SAFE]: The skill advocates for standard security practices when verifying signatures from smart contract wallets (ERC-6492) by using specific public clients for supported chains.
Audit Metadata