foundry-solidity

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of documentation, code examples, and configuration templates for Ethereum smart contract development using Foundry. It contains no executable scripts or hidden logic.
  • [COMMAND_EXECUTION]: The instructions involve standard and legitimate usage of developer CLI tools such as forge, cast, anvil, and chisel. All commands are context-appropriate for the skill's stated purpose.
  • [EXTERNAL_DOWNLOADS]: Documentation describes how to manage dependencies via git submodules and the Soldeer package manager, referencing well-known and trusted sources like OpenZeppelin and official GitHub repositories.
  • [CREDENTIALS_UNSAFE]: The skill promotes secure development practices by demonstrating how to use environment variables for sensitive data like private keys and API keys instead of hardcoding them.
  • [REMOTE_CODE_EXECUTION]: The documentation includes information on the vm.ffi cheatcode within Foundry's testing environment. While this is a high-privilege feature that allows executing shell commands from within tests, it is presented here as a standard tool for differential testing and is not used maliciously.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 05:58 PM