web3-hunt-zksync-era Eval report.

Task wording matches this skill metadata.

• Evaluate web3-hunt-zksync-era before installing it in an agent workflow
• security
• Security and compliance workflows; Claude Code teams; builders willing to evaluate younger projects

Install handoff is available.

• npx skills add Awarexone/web3-bug-bounty-hunting-ai-skills --skill web3-hunt-zksync-era

standard package or runtime install path

• npx skills add Awarexone/web3-bug-bounty-hunting-ai-skills --skill web3-hunt-zksync-era

Good trust signals with a few areas worth checking before rollout.

• Strong shortlist
• 138 GitHub stars
• MIT

Risky

• Permission surface may require sandboxing

This skill should not be selected by an agent without explicit human security review.

• Do not auto-install. Inspect the source, dependencies, and permission surface first.
• Audit risk exceeds the requested agent policy

MIT

• MIT

secrets or environment access, filesystem or document access

• Network access: medium
• Filesystem access: medium
• Secrets or environment access: high