Scaffold 0G Project
Initializes a new 0G dApp project with the correct SDKs, TypeScript setup, and boilerplate code for storage and compute interactions.
Install this skill
Security score
The Scaffold 0G Project skill was audited on Feb 25, 2026 and we found 20 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 167 | console.log(`Available services: ${services.length}`); |
Access to .env file
| 24 | 4. Create `.env` template and `.gitignore` |
Access to .env file
| 34 | - Create `.env` with placeholder values (never real keys) |
Access to .env file
| 35 | - Add `.env` to `.gitignore` |
Access to .env file
| 81 | #### .env |
Access to .env file
| 103 | .env |
Access to .env file
| 104 | .env.local |
Access to .env file
| 105 | .env.*.local |
Access to .env file
| 135 | const provider = new ethers.JsonRpcProvider(process.env.RPC_URL); |
Access to .env file
| 136 | const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider); |
Access to .env file
| 137 | const indexer = new Indexer(process.env.STORAGE_INDEXER!); |
Access to .env file
| 160 | const provider = new ethers.JsonRpcProvider(process.env.RPC_URL); |
Access to .env file
| 161 | const wallet = new ethers.Wallet(process.env.PRIVATE_KEY!, provider); |
Access to .env file
| 200 | accounts: [process.env.PRIVATE_KEY!], |
Access to .env file
| 205 | accounts: [process.env.PRIVATE_KEY!], |
Access to .env file
| 246 | | `PRIVATE_KEY not set` | Missing `.env` file | Create `.env` with credentials | |
External URL reference
| 85 | RPC_URL=https://evmrpc-testnet.0g.ai |
External URL reference
| 92 | STORAGE_INDEXER=https://indexer-storage-testnet-turbo.0g.ai |
External URL reference
| 198 | url: 'https://evmrpc-testnet.0g.ai', |
External URL reference
| 203 | url: 'https://evmrpc.0g.ai', |
Install this skill with one command
/learn @0gfoundation/scaffold-project