bridge-stablecoin
Facilitates USDC bridging across EVM chains and Solana using Circle's SDK, enabling seamless crosschain transfers.
Install this skill
or
73/100
Security score
The bridge-stablecoin skill was audited on Jun 11, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 206
Template literal with variable interpolation in command context
SourceSKILL.md
| 206 | console.log(`Failed at: ${failedStep?.name}`); |
medium line 207
Template literal with variable interpolation in command context
SourceSKILL.md
| 207 | console.log(`Error: ${failedStep?.error}`); |
medium line 213
Template literal with variable interpolation in command context
SourceSKILL.md
| 213 | console.log(`${step.name}: ${step.txHash}`); |
medium line 244
Access to .env file
SourceSKILL.md
| 244 | - NEVER hardcode, commit, or log secrets (private keys, API keys, entity secrets). ALWAYS use environment variables or a secrets manager. Add `.gitignore` entries for `.env*` and secret files when sca |
low line 100
External URL reference
SourceSKILL.md
| 100 | "explorerUrl": "https://testnet.arcscan.app/tx/0x1234..." |
low line 106
External URL reference
SourceSKILL.md
| 106 | "explorerUrl": "https://testnet.arcscan.app/tx/0xabcdef..." |
low line 119
External URL reference
SourceSKILL.md
| 119 | "explorerUrl": "https://sepolia.basescan.org/tx/0xfedcba..." |
low line 262
External URL reference
SourceSKILL.md
| 262 | - [Circle Bridge Kit SDK](https://developers.circle.com/bridge-kit) |
low line 263
External URL reference
SourceSKILL.md
| 263 | - [CCTP Documentation](https://developers.circle.com/cctp) |
low line 264
External URL reference
SourceSKILL.md
| 264 | - [Circle Developer Docs](https://developers.circle.com/llms.txt) -- **Always read this first** when looking for relevant documentation from the source website. |
low line 275
External URL reference
SourceSKILL.md
| 275 | DISCLAIMER: This skill is provided "as is" without warranties, is subject to the [Circle Developer Terms](https://console.circle.com/legal/developer-terms), and output generated may contain errors and |
Scanned on Jun 11, 2026
View Security Dashboard