Skillget

code

skill
Security Audit
Fail
Health Pass
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 13 GitHub stars
Code Fail
  • rm -rf — Recursive force deletion command in .github/workflows/ci.yml
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This tool is an AI-assisted development environment for building Solidity smart contracts and plugins. It leverages AI slash commands to automatically generate, test, and deploy condition resolvers and insurance policies for the ReineiraOS ecosystem.

Security Assessment
The automated code scan found no dangerous patterns, and the project requests no inherently dangerous system permissions. However, manual review reveals a medium risk profile due to the nature of the setup. The instructions explicitly require placing your private key and RPC URL into a `.env` file for contract deployment. While this is standard practice for Foundry-based blockchain projects, it inherently handles highly sensitive cryptographic data. The tool relies on executing local shell commands via Foundry (such as `forge build` and `forge test`) and making network requests to the Arbitrum Sepolia blockchain and block explorers. There are no hardcoded secrets in the source code. Overall risk is rated as Medium due to the necessary handling of private keys.

Quality Assessment
The project is relatively new but appears highly maintained, with repository activity as recent as today. It is properly licensed under the permissive and standard MIT license. However, it suffers from extremely low community visibility, currently boasting only 5 GitHub stars. Consequently, the community trust level is low, meaning the codebase has not been broadly vetted by independent security experts.

Verdict
Use with caution: the underlying code appears safe and is actively maintained, but low community adoption and the inherent handling of private keys for blockchain deployment warrant careful manual review of generated smart contracts before use.
SUMMARY

AI-assisted plugin development for ReineiraOS

README.md

ReineiraOS Code

Platform
License

AI-assisted plugin development for ReineiraOS. Build condition resolvers and insurance policies with Claude Code.

Platform 0.1 — Generates contracts compatible with ReineiraOS v0.1 interfaces. Check reineira.json for version details.

Setup

git clone https://github.com/ReineiraOS/reineira-code.git
cd reineira-code
npm install --legacy-peer-deps
cp .env.example .env
# Add your private key and RPC URL to .env

Usage

Open in an editor with Claude Code. Use slash commands:

Command What it does
/new-resolver Build a condition resolver from a description
/new-policy Build an insurance policy with FHE from a description
/deploy Deploy any contract to Arbitrum Sepolia
/test Run tests, diagnose and fix failures
/audit Security audit against the protocol checklist
/integrate Generate SDK code to attach your contract to an escrow
/scaffold-test Generate tests for an existing contract
/verify Verify a deployed contract on Arbiscan

Example

/new-resolver A resolver that verifies PayPal payment via zkTLS proof from Reclaim Protocol

Claude Code generates the Solidity contract, tests, and deployment script — all pre-configured for the ReineiraOS protocol.

The ecosystem

Repo What you do there Platform
reineira-atlas Run the startup — strategy, ops, growth, compliance, pitch 0.1
reineira-code (this repo) Build smart contracts — resolvers, policies, tests, deploy 0.1
platform-modules Ship the product — backend, platform app, payment link 0.1

All repos declare their platform compatibility in reineira.json. When the platform version bumps, breaking contract interface changes may require upgrading.

Test & Deploy

# Test
forge test

# E2E Demo (Chainlink + Reclaim on Arbitrum Sepolia)
forge script script/E2EDemo.s.sol --rpc-url arbitrum_sepolia --broadcast

What's Included

Resolvers:

  • ChainlinkPriceFeedResolver - Price-based conditions using Chainlink Data Feeds
  • ReclaimResolver - zkTLS proof verification for any HTTPS endpoint
  • TimelockResolver - Simple time-based conditions

Tests: 35/35 passing

Compatibility

Component Requirement
Platform ReineiraOS 0.1
Solidity ^0.8.24
Foundry Latest
SDK @reineira-os/sdk ^0.1.0
cofhejs ^0.5.0 (migrating)
Reclaim @reclaimprotocol/zk-fetch ^0.8.0
Chainlink @chainlink/contracts ^1.3.0
Node.js 18+

Documentation

Foundry Reference

This project uses Foundry for smart contract development:

  • Forge: Ethereum testing framework
  • Cast: CLI for interacting with contracts
  • Anvil: Local Ethereum node for testing

For more details, see the Foundry Book.

License

MIT

Reviews (0)

No results found