Skip to main content

ChunkTech Skill

Enables permanent on-chain storage of files and browser extensions using chunked calldata transactions for censorship-resistant hosting.

Install this skill

or
81/100

Security score

The ChunkTech Skill skill was audited on Feb 18, 2026 and we found 7 security issues across 5 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 30

Template literal with variable interpolation in command context

SourceSKILL.md
30const account = privateKeyToAccount(`0x${process.env.PRIVATE_KEY}`);
medium line 167

Template literal with variable interpolation in command context

SourceSKILL.md
167const dataUri = `data:application/zip;base64,${base64}`;
low line 30

Access to .env file

SourceSKILL.md
30const account = privateKeyToAccount(`0x${process.env.PRIVATE_KEY}`);
medium line 47

Access to system keychain/keyring

SourceSKILL.md
47keyChain: 'ethereum',
low line 217

Base64 decode via atob()

SourceSKILL.md
217const zipBytes = Uint8Array.from(atob(base64), c => c.charCodeAt(0));
low line 183

External URL reference

SourceSKILL.md
183<script src="https://cdnjs.cloudflare.com/ajax/libs/jszip/3.10.1/jszip.min.js"></script>
low line 193

External URL reference

SourceSKILL.md
193const RPC_URL = 'https://mainnet.base.org';
Scanned on Feb 18, 2026
View Security Dashboard