AgentConstitution

This skill appears to do what it claims (query governance contracts and optionally log actions on Base Sepolia), but before installing or using it: - Be aware the scripts expect the 'cast' CLI (Foundry) and examples use ethers.js/node; the skill metadata does not declare these binaries — install them from official sources if you plan to run scripts. - The SKILL.md shows using --private-key $AGENT_PRIVATE_KEY to send logAction transactions. The skill metadata does NOT declare this environment variable. Do NOT put your real/mainnet private key into an environment variable for this skill. If you must send transactions, use a testnet-only key with minimal funds and rotate it afterward. - Verify contract addresses and the RPC endpoint independently (e.g., BaseScan) and confirm the linked GitHub repo is the expected project before trusting the scripts. - Because this is instruction-only, nothing will be installed automatically — you (or the agent runtime) will run commands that can sign and send transactions. Only provide signing credentials when you fully trust the code and the network. If the publisher can clarify and update the skill metadata to: (a) declare required binaries (cast, node), (b) explicitly list AGENT_PRIVATE_KEY (or alternative signing method) in requires.env, and (c) add warnings about testnet-only and private-key handling, the remaining concerns would be resolved.