Skip to main content

Provider Discovery

Enables discovery and verification of compute providers on the 0G network, ensuring secure and reliable service selection.

Install this skill

or
25/100

Security score

The Provider Discovery skill was audited on Feb 25, 2026 and we found 23 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 71

Template literal with variable interpolation in command context

SourceSKILL.md
71console.log(`Chatbot providers: ${chatbotServices.length}`);
medium line 73

Template literal with variable interpolation in command context

SourceSKILL.md
73console.log(` ${s[0]} — model: ${s[6]}, TEE: ${s[10]}`);
medium line 75

Template literal with variable interpolation in command context

SourceSKILL.md
75console.log(`Image providers: ${imageServices.length}`);
medium line 76

Template literal with variable interpolation in command context

SourceSKILL.md
76console.log(`Speech providers: ${speechServices.length}`);
medium line 96

Template literal with variable interpolation in command context

SourceSKILL.md
96throw new Error(`No TEE-verified ${serviceType} providers found`);
medium line 102

Template literal with variable interpolation in command context

SourceSKILL.md
102console.log(`Selected provider: ${providerAddress}`);
medium line 103

Template literal with variable interpolation in command context

SourceSKILL.md
103console.log(`Model: ${model}`);
medium line 104

Template literal with variable interpolation in command context

SourceSKILL.md
104console.log(`TEE verified: ${selected[10]}`);
medium line 120

Template literal with variable interpolation in command context

SourceSKILL.md
120console.log(`Provider ${providerAddress} acknowledged`);
medium line 133

Template literal with variable interpolation in command context

SourceSKILL.md
133console.log(`Endpoint: ${endpoint}`);
medium line 134

Template literal with variable interpolation in command context

SourceSKILL.md
134console.log(`Model: ${model}`);
medium line 155

Template literal with variable interpolation in command context

SourceSKILL.md
155throw new Error(`No ${serviceType} providers available`);
medium line 21

Access to .env file

SourceSKILL.md
21- `.env` with `PRIVATE_KEY`, `RPC_URL`
low line 58

Access to .env file

SourceSKILL.md
58const provider = new ethers.JsonRpcProvider(process.env.RPC_URL);
low line 59

Access to .env file

SourceSKILL.md
59const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
low line 86

Access to .env file

SourceSKILL.md
86const provider = new ethers.JsonRpcProvider(process.env.RPC_URL);
low line 87

Access to .env file

SourceSKILL.md
87const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
low line 114

Access to .env file

SourceSKILL.md
114const provider = new ethers.JsonRpcProvider(process.env.RPC_URL);
low line 115

Access to .env file

SourceSKILL.md
115const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
low line 128

Access to .env file

SourceSKILL.md
128const provider = new ethers.JsonRpcProvider(process.env.RPC_URL);
low line 129

Access to .env file

SourceSKILL.md
129const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
low line 144

Access to .env file

SourceSKILL.md
144const provider = new ethers.JsonRpcProvider(process.env.RPC_URL);
low line 145

Access to .env file

SourceSKILL.md
145const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider);
Scanned on Feb 25, 2026
View Security Dashboard