Skills near-dapp
๐Ÿ“ฆ

near-dapp

Content revision r1 Safe โš™๏ธ External commands๐ŸŒ Network access

Build NEAR dApps With Wallet Support

NEAR dApp setup requires wallet, contract, and transaction patterns across several libraries. This skill gives practical setup paths for scaffolding, React hooks, vanilla JavaScript, and common NEAR calls.

Supports: Claude Codex Code(CC)
๐Ÿ“Š 74 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "near-dapp" from https://skillstore.io/skills/internet-court-near-dapp.md and its manifest at https://skillstore.io/api/skills/internet-court-near-dapp/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "near-dapp". Add NEAR wallet login to an existing React app.

Expected outcome:

A focused implementation plan covering package review, provider setup, wallet state, sign-in controls, and testnet verification.

Using "near-dapp". Create a new NEAR prototype with a frontend and contract.

Expected outcome:

A scaffold plan with framework and contract choices, command approval notes, generated project structure, and next validation steps.

Using "near-dapp". Connect a UI button to a NEAR contract method.

Expected outcome:

A transaction flow that names the contract, method, arguments, gas, deposit, wallet approval step, and expected user feedback.

Security Audit

Safe
v2 โ€ข 7/21/2026 Open versioned report

The skill contains legitimate installation instructions that execute registry packages and a CDN import that loads third-party executable code. Most external-command findings are false positives caused by Markdown backticks and TypeScript examples. No prompt-injection language or evidence of data exfiltration was found in the reviewed files.

4
Files scanned
642
Lines analyzed
9
Review items
0
False positives ignored
Capability review items (9)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
Ruby/shell backtick execution
```bash
This fenced shell block instructs the agent or user to run npx create-near-app@latest, which downloads and executes a package from the registry.
Medium
Ruby/shell backtick execution
```
This finding covers a fenced shell command that runs npx create-near-app@latest. The command executes code fetched from the package registry.
Medium
Ruby/shell backtick execution
```bash
This fenced shell block instructs the user to run npx create-near-app with installation enabled. It downloads and executes third-party package code.
Medium
Ruby/shell backtick execution
```
This finding covers a fenced shell command that invokes npx with --install. It can execute registry-provided code in the local environment.
Medium
Ruby/shell backtick execution
```bash
This fenced shell block instructs installation of several npm packages. Package installation can execute lifecycle scripts from third-party dependencies.
Medium
Ruby/shell backtick execution
```
This finding covers an npm install command for third-party wallet dependencies. Installation may execute dependency lifecycle scripts.
Medium
Ruby/shell backtick execution
```bash
This fenced shell block instructs installation of a third-party npm package. Package installation can run lifecycle scripts.
Medium
Ruby/shell backtick execution
```
This finding covers an npm install command for a third-party wallet connector. Installation can execute dependency lifecycle scripts.
Low
Hardcoded URL
{ "imports": { "@hot-labs/near-connect": "https://esm.sh/@hot-labs/near-connect" } }
The import map loads executable JavaScript from a third-party CDN. This is a supply-chain and availability dependency unless the package URL and version are pinned and trusted.
Audited by: claude View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/internet-court-near-dapp/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/internet-court-near-dapp/security.svg)](https://skillstore.io/skills/internet-court-near-dapp?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/internet-court-near-dapp?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/internet-court-near-dapp/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/internet-court-near-dapp.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

internet-court. (2026). near-dapp security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/internet-court-near-dapp/audits/2

BibTeX citation

@techreport{internet-court-internet-court-near-dapp-2026, author = {internet-court}, title = {near-dapp security audit report (audit version 2)}, institution = {Skillstore}, year = {2026}, number = {2}, url = {https://skillstore.io/skills/internet-court-near-dapp/audits/2}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "near-dapp security audit report (audit version 2)" version: "unspecified" type: report authors: - name: "internet-court" date-released: "2026-07-21" url: "https://skillstore.io/skills/internet-court-near-dapp/audits/2" identifiers: - type: other value: "skillstore:internet-court-near-dapp:audit:2" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
45
Architecture
85
Maintainability
87
Content
65
Community
83
Spec Compliance

What You Can Build

Add Wallet Login to React

Integrate NEAR sign-in, sign-out, account state, and contract calls into an existing React application.

Start a NEAR Prototype

Create a new dApp scaffold with a selected frontend framework and smart contract language.

Connect UI to Contracts

Build user flows for read calls, write calls, deposits, transfers, and transaction signing.

Try These Prompts

Create a Starter dApp
Create a NEAR dApp starter plan using Vite React and a Rust contract. Include the files to inspect before running commands.
Add React Wallet Login
Add NEAR wallet connection to my React app with near-connect-hooks. Show the provider placement, wallet state, and login button behavior.
Build Contract Interaction UI
Design a NEAR frontend flow for reading contract state and sending a wallet-approved function call with gas and deposit values.
Plan Advanced Wallet Transactions
Plan a non-React NEAR wallet integration using NearConnector, WalletConnect, transaction signing, and NEP-413 message signing.

Best Practices

  • Start on testnet and verify contract names, methods, gas, and deposits before mainnet use.
  • Pin package versions and review install commands before allowing an agent to run them.
  • Show clear transaction details to users before wallet approval.

Avoid

  • Running npx latest or install commands without user approval.
  • Hardcoding mainnet settings before testnet validation.
  • Treating wallet sign-in as authorization for privileged app actions.

Frequently Asked Questions

What does this skill help build?
It helps build NEAR dApps with project scaffolding, wallet connection, contract calls, transfers, and transaction signing patterns.
Does it support existing React apps?
Yes. It includes a path for adding NearProvider, useNearWallet, sign-in, sign-out, and contract helpers to React apps.
Can it support non-React apps?
Yes. It includes direct NearConnector guidance for vanilla JavaScript or other frontend frameworks.
Does it deploy smart contracts?
No. It can guide scaffold and frontend workflows, but deployment choices must be reviewed in the generated project.
Should commands be run automatically?
No. npx and npm commands should be reviewed, pinned where possible, and approved before execution.
Which AI tools can use it?
The report marks support for Claude, Codex, and Claude Code.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Ref

3f6e026a3363e0954ede7bef0cfe88d4475de137

Maintenance freshness

7/21/2026

Usage

1 downloads ยท 0 views

File structure

๐Ÿ“ references/

๐Ÿ“„ create-near-app.md

๐Ÿ“„ near-connect-hooks.md

๐Ÿ“„ near-connect.md

๐Ÿ“„ SKILL.md

More from internet-court

View all
View all