hardhat-setup
Automates the setup and configuration of Hardhat projects for Solidity development, streamlining project initialization and management.
Install this skill
Security score
The hardhat-setup skill was audited on Feb 12, 2026 and we found 32 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
Access to .env file
| 51 | ├── .env # Environment variables |
Access to .env file
| 87 | url: process.env.SEPOLIA_RPC_URL || "", |
Access to .env file
| 88 | accounts: process.env.PRIVATE_KEY ? [process.env.PRIVATE_KEY] : [] |
Access to .env file
| 92 | apiKey: process.env.ETHERSCAN_API_KEY |
Access to .env file
| 112 | url: process.env.SEPOLIA_RPC_URL || "", |
Access to .env file
| 113 | accounts: process.env.PRIVATE_KEY ? [process.env.PRIVATE_KEY] : [] |
Access to .env file
| 123 | See `./templates/.env.example` for complete environment variable template. |
Access to .env file
| 183 | url: process.env.MAINNET_RPC_URL, |
Access to .env file
| 184 | accounts: [process.env.PRIVATE_KEY], |
Access to .env file
| 188 | url: process.env.SEPOLIA_RPC_URL, |
Access to .env file
| 189 | accounts: [process.env.PRIVATE_KEY], |
Access to .env file
| 193 | url: process.env.ARBITRUM_RPC_URL, |
Access to .env file
| 194 | accounts: [process.env.PRIVATE_KEY], |
Access to .env file
| 240 | enabled: process.env.REPORT_GAS === "true", |
Access to .env file
| 242 | coinmarketcap: process.env.COINMARKETCAP_API_KEY, |
Access to .env file
| 346 | .env |
Access to .env file
| 347 | .env.local |
Access to .env file
| 425 | ⚠️ **CRITICAL: Never store production private keys in .env files!** |
Access to .env file
| 445 | url: process.env.MAINNET_RPC_URL, |
Access to .env file
| 508 | url: process.env.SEPOLIA_RPC_URL, |
Access to .env file
| 574 | #### 6. .env Variables (Development/Testing ONLY) |
Access to .env file
| 584 | url: process.env.SEPOLIA_RPC_URL, |
Access to .env file
| 585 | accounts: process.env.PRIVATE_KEY ? [process.env.PRIVATE_KEY] : [] |
Access to .env file
| 591 | **If using .env:** |
Access to .env file
| 595 | - ✅ Add .env to .gitignore |
Access to .env file
| 596 | - ❌ Never commit .env to version control |
Access to .env file
| 637 | # Development only: with .env private key |
Access to .env file
| 646 | 1. **Secure private key management** - Use hardware wallets or Hardhat Configuration Variables for all deployments; never store production keys in .env |
Access to .env file
| 649 | 4. **Comprehensive .env.example** - Document all required environment variables (but discourage private keys) |
Access to .env file
| 686 | # Check RPC URL in .env |
Access to .env file
| 712 | - `./templates/.env.example` - Environment variables template |
Access to .env file
| 724 | 2. Copy `.env.example` to `.env` and fill in values |