Merkle Verification
Verifies data integrity for files using Merkle tree proofs, ensuring downloaded data matches the original upload.
Install this skill
or
79/100
Security score
The Merkle Verification skill was audited on Feb 25, 2026 and we found 5 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 52
Template literal with variable interpolation in command context
SourceSKILL.md
| 52 | if (err) throw new Error(`Merkle tree error: ${err}`); |
medium line 78
Template literal with variable interpolation in command context
SourceSKILL.md
| 78 | console.log(`Expected: ${expectedHash}`); |
medium line 79
Template literal with variable interpolation in command context
SourceSKILL.md
| 79 | console.log(`Actual: ${actualHash}`); |
medium line 80
Template literal with variable interpolation in command context
SourceSKILL.md
| 80 | console.log(`Valid: ${isValid}`); |
low line 101
Access to .env file
SourceSKILL.md
| 101 | const indexer = new Indexer(process.env.STORAGE_INDEXER!); |
Scanned on Feb 25, 2026
View Security DashboardInstall this skill with one command
/learn @0gfoundation/merkle-verification