Skip to main content

viem-integration

Integrates EVM blockchains using viem for TypeScript applications, enabling blockchain data reading, transaction sending, and smart contract interaction.

Install this skill

or
65/100

Security score

The viem-integration skill was audited on May 29, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 91

Template literal with variable interpolation in command context

SourceSKILL.md
91console.log(`Balance: ${formatEther(balance)} ETH`);
medium line 125

Template literal with variable interpolation in command context

SourceSKILL.md
125const account = privateKeyToAccount(process.env.PRIVATE_KEY as `0x${string}`);
medium line 138

Template literal with variable interpolation in command context

SourceSKILL.md
138console.log(`Transaction hash: ${hash}`);
medium line 148

Template literal with variable interpolation in command context

SourceSKILL.md
148const account = privateKeyToAccount(process.env.PRIVATE_KEY as `0x${string}`);
medium line 177

Template literal with variable interpolation in command context

SourceSKILL.md
177console.log(`Confirmed in block ${receipt.blockNumber}`);
medium line 70

Access to .env file

SourceSKILL.md
70- **Private keys**: MUST NEVER be hardcoded — always use `process.env.PRIVATE_KEY` with runtime validation
low line 125

Access to .env file

SourceSKILL.md
125const account = privateKeyToAccount(process.env.PRIVATE_KEY as `0x${string}`);
low line 148

Access to .env file

SourceSKILL.md
148const account = privateKeyToAccount(process.env.PRIVATE_KEY as `0x${string}`);
low line 71

External URL reference

SourceSKILL.md
71- **RPC URLs**: MUST use `https://` or `wss://` protocols only
low line 267

External URL reference

SourceSKILL.md
267- [viem Documentation](https://viem.sh)
low line 268

External URL reference

SourceSKILL.md
268- [wagmi Documentation](https://wagmi.sh)
Scanned on May 29, 2026
View Security Dashboard
Installation guide →