foundry-solidity
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation, code examples, and configuration templates for Ethereum smart contract development using Foundry. It contains no executable scripts or hidden logic.
- [COMMAND_EXECUTION]: The instructions involve standard and legitimate usage of developer CLI tools such as
forge,cast,anvil, andchisel. All commands are context-appropriate for the skill's stated purpose. - [EXTERNAL_DOWNLOADS]: Documentation describes how to manage dependencies via git submodules and the Soldeer package manager, referencing well-known and trusted sources like OpenZeppelin and official GitHub repositories.
- [CREDENTIALS_UNSAFE]: The skill promotes secure development practices by demonstrating how to use environment variables for sensitive data like private keys and API keys instead of hardcoding them.
- [REMOTE_CODE_EXECUTION]: The documentation includes information on the
vm.fficheatcode within Foundry's testing environment. While this is a high-privilege feature that allows executing shell commands from within tests, it is presented here as a standard tool for differential testing and is not used maliciously.
Audit Metadata