Setup Cairo Contracts

• Verdict: Advisory
• Analyzed: Apr 30, 2026, 5:14 AM
• Findings: 0
• Version: 1.0.1
• Reason codes: None
• Engine: v2.4.5

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI05: Unexpected Code Execution

NoteHigh Confidence

What this means

Running this command can modify the user's development environment, so the user needs to trust the installer source.

Why it was flagged

The skill instructs users to pipe a remote installer directly into the shell. This is purpose-aligned for installing the Starknet/Cairo toolchain, but it runs external code on the user's machine.

Skill content

curl --proto '=https' --tlsv1.2 -sSf https://sh.starkup.sh | sh

Recommendation

Before running the command, verify the Starkup installer URL against official Starknet documentation and consider reviewing the script or using an official package manager if available.