Skip to main content

Sepolia Testnet Deployment Skill

Facilitates deploying Groth16 verifier contracts on Sepolia testnet, including batch submission and on-chain verification.

Install this skill

or
73/100

Security score

The Sepolia Testnet Deployment Skill skill was audited on Mar 4, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 208

Access to .env file

SourceSKILL.md
208- **`.gitignore`**: Ensure `.env` and credential files are excluded from version control
medium line 84

Hex-encoded characters

SourceSKILL.md
84USER = b"\xde\xad" + b"\x00" * 18
medium line 171

Hex-encoded characters

SourceSKILL.md
171ALICE = b"\x01" * 20
medium line 172

Hex-encoded characters

SourceSKILL.md
172BOB = b"\x02" * 20
low line 27

External URL reference

SourceSKILL.md
27export SEPOLIA_RPC_URL="https://ethereum-sepolia-rpc.publicnode.com"
low line 34

External URL reference

SourceSKILL.md
34| PublicNode | `https://ethereum-sepolia-rpc.publicnode.com` |
low line 35

External URL reference

SourceSKILL.md
35| 1RPC | `https://1rpc.io/sepolia` |
low line 38

External URL reference

SourceSKILL.md
38- Google Cloud Faucet: https://cloud.google.com/application/web3/faucet/ethereum/sepolia
low line 52

External URL reference

SourceSKILL.md
52RPC_URL = os.environ.get("SEPOLIA_RPC_URL", "https://1rpc.io/sepolia")
low line 197

External URL reference

SourceSKILL.md
197print(f"Verifier: https://sepolia.etherscan.io/address/0x{verifier_addr.hex()}")
low line 200

External URL reference

SourceSKILL.md
200print(f"TX: https://sepolia.etherscan.io/tx/0x{receipt.l1_tx_hash.hex()}")
Scanned on Mar 4, 2026
View Security Dashboard