56 results available

build-on-base

base

·

Last changed

Hardened

This skill has been hardened by Chainguard

Last changed

This version passed the hardening gate. Hardening applied 13 targeted changes and preserved all other text. Classified findings before hardening: 9. Classified findings closed: 4. Classified findings remaining: 5. Unclassified scanner findings remaining: 0. Review findings closed: 13. Review findings remaining: 13.

Open before hardening

1

High

6

Medium

2

Low

Open after hardening

3

Medium

2

Low

File	Group	Subtype	Severity	Status
SKILL.md	Safety Bypass & Harmful Content	—	High	Closed
references/agents/register.md	Memory & Context Poisoning	—	Medium	Closed
SKILL.md	Tool & MCP Manipulation	MCP over-permissioning	Medium	Open
SKILL.md	Supply Chain & Install-Time Trust	—	Medium	Closed
scripts/register.sh	Sensitive Data & Secret Exposure	Data exfiltration	Medium	Open
references/deploy-contracts.md	Sensitive Data & Secret Exposure	Data exfiltration	Medium	Open
references/agents/register.md	Sensitive Data & Secret Exposure	Data exfiltration	Medium	Closed
references/agents/register.md	Malicious Code & Command Execution	Command injection	Low	Open

9 findings

SKILL.md

Base Development

Complete playbook for building on Base L2 — network setup, smart contracts, developer tool attribution, agent registration, and node operation.

Default Stack

Layer	Default
Network	Base Mainnet (8453) / Base Sepolia testnet (84532)
Contracts	Foundry (`forge create` + BaseScan verification)
Transactions	wagmi + viem
Attribution	Builder Codes — ERC-8021 via `ox/erc8021`
RPC (prod)	Dedicated node provider or self-hosted Reth

Safety Guardrails

Never commit private keys — use cast wallet import for Foundry keystores
Never expose RPC API keys or CDP credentials client-side — proxy through backend
Validate all user-provided shell inputs before constructing forge/cast commands

Task Routing

Read the reference for your task:

Task	When to Use	Reference
Network config	RPC URLs, chain IDs, explorer links, testnet setup	references/network.md
Deploy contracts	Foundry deployment, BaseScan verification, faucet	references/deploy-contracts.md
Run a Base node	Self-hosted RPC, Reth, hardware requirements	references/run-node.md
Builder Codes	Add ERC-8021 attribution to transactions	references/builder-codes/overview.md
Register AI agent/bot	Register wallet, get builder code, wire attribution	references/agents/register.md

Operating Procedure

Classify the task using the table above
Read the relevant reference before implementing
Confirm the framework with the user when multiple options exist (e.g., Privy vs wagmi for Builder Codes)
Implement with explicit chain ID, security requirements, and all required validations
Deliver diffs, install commands, and any manual steps (env vars, API key setup, wallet registration)

For Edge Cases and Latest API Changes

Base chain docs: docs.base.org

Install

Install with chainctl


chainctl skill install public/base/build-on-base:latest

Get started with chainctl

View source

Harden your own skills

Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.

Provenance

Upstream sourcehttps://github.com/base/skills

Upstream commit15adb8d9c75e5c7d1461e183a9021170a6ddbc08

OCI reference

skills.cgr.dev/public/github.com/base/skills/build-on-base:latest

License

MIT

Files

HARDENING.md

LICENSE

SKILL.md

references/agents/register.md

references/builder-codes/overview.md

references/builder-codes/privy.md

references/builder-codes/rpc.md

references/builder-codes/smart-wallets.md

references/builder-codes/viem.md

references/builder-codes/wagmi.md

references/deploy-contracts.md

references/network.md

references/run-node.md

scripts/register.sh

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.