chainlink-cre-skill
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the Bash tool to execute curl commands for retrieving documentation if standard web fetching tools return an empty shell.
- [REMOTE_CODE_EXECUTION]: Documentation within the skill references automatic installation methods for the CRE CLI that involve piping remote scripts from the vendor's domain (cre.chain.link) to shell interpreters.
- [EXTERNAL_DOWNLOADS]: The skill is designed to fetch documentation and code examples from official vendor sources, specifically docs.chain.link and the smartcontractkit GitHub repositories.
- [CREDENTIALS_UNSAFE]: The skill provides guidance on managing sensitive data such as private keys and API keys using .env files for local simulation and development.
Audit Metadata