Is limone-eth/erc8004-agent safe?
Yes. limone-eth/erc8004-agent is safe to install. Oathe's behavioral security audit gave the erc8004-agent skill by limone-eth a trust score of 82/100 with 5 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/limone-eth/erc8004-agent
Is limone-eth/erc8004-agent safe to install?
This skill provides legitimate blockchain agent registration functionality with a well-designed security architecture that isolates private keys in external proxy servers. While it involves external dependencies and financial operations that create inherent risks, no malicious intent or obvious vulnerabilities were detected.
What security issues were found in limone-eth/erc8004-agent?
Category Scores
Findings (5)
MEDIUM External package dependency -15 ▶
Skill instructs agent to install @buildersgarden/siwa npm package, creating a trust boundary where malicious code could be executed if the package is compromised.
MEDIUM Strong external service directives -10 ▶
Skill uses strong language requiring agent to use specific external services and proxy servers, which could override user preferences.
MEDIUM External network dependencies -15 ▶
Skill requires network calls to external keyring proxy servers and IPFS services, creating potential data exfiltration vectors if services are compromised.
LOW Financial transaction risk -20 ▶
Skill involves real cryptocurrency transactions and wallet funding, creating financial risk if agent is manipulated or addresses are incorrect.
LOW External service deployment -10 ▶
Instructions to deploy services via Railway template could expose user to additional attack vectors through cloud deployment.
Should I install limone-eth/erc8004-agent?
Oathe's verdict for limone-eth/erc8004-agent is SAFE with a trust score of 82/100. Recommendation: Install with caution.