deploy-to-skale

Fail

Audited by Gen Agent Trust Hub on Mar 19, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The deployment instructions in SKILL.md include a command to download and immediately execute a shell script from a remote URL (curl -L https://foundry.paradigm.xyz | bash). This execution pattern bypasses security inspection and is flagged as coming from an untrusted source.
  • [EXTERNAL_DOWNLOADS]: The skill requires downloading external code and libraries from non-vendor repositories, including GitHub dependencies via forge install dirtroad/skale-rng and NPM packages @x402/core, @x402/evm, and @x402/hono.
  • [COMMAND_EXECUTION]: The skill guides users to execute various command-line tools (foundryup, forge script, npx hardhat) that perform network requests and interact with the local operating system based on user-provided configurations.
Recommendations
  • HIGH: Downloads and executes remote code from: https://foundry.paradigm.xyz - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 19, 2026, 07:19 PM