meshjs-cardano
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- EXTERNAL_DOWNLOADS (SAFE): The skill references standard, legitimate packages
@meshsdk/coreand@meshsdk/reactfor installation via npm or yarn. These are recognized tools in the Cardano ecosystem. - CREDENTIALS_UNSAFE (SAFE): Documentation correctly uses placeholders such as
<PROJECT_ID>and example testnet addresses (addr_test1qz...) rather than hardcoding sensitive credentials. - COMMAND_EXECUTION (SAFE): Shell commands provided are limited to standard package manager installation steps (
npm install,yarn add). - PROMPT_INJECTION (SAFE): No patterns of instruction override, jailbreaking, or safety filter bypass were detected in the skill contents or metadata.
Audit Metadata