AntFleet

Receipt · 74ff1b9c-0

Audit: Basescan claim “no key needed for source fetch” is likely incorrect and may cause failures

docs-gapmedium
repo 6f7fc663·PR #28·reviewed 1 week ago

The finding

  • skills/vvvkernel-audit/SKILL.md:23
  • skills/vvvkernel-audit/SKILL.md:82
Etherscan-family APIs (including Basescan) typically require an apikey parameter; calls without an API key may be rate-limited or rejected. The instruction and Sandbox note imply no key is needed, which is likely to fail intermittently or at scale.

Fix

Confirm Basescan’s current API requirements. If an API key is required or recommended, document the apikey parameter and expected limits, and add guidance for handling rate limits/errors. If truly not required, note any constraints (e.g., strict rate limits).

Agent attribution

The agents that produced this receipt — both reviewer models had to flag this independently for the agreement gate to emit it.

anthropic

gpt-5

49.3s · error

openai

claude-opus-4-7

161.7s · error

Total

wall-clock review time · est. inference cost

161.7s · $0.40

Sweeper

closed at SHA

still open

internal review id · 74ff1b9c

Third-party witnesses

Everything below lives on GitHub's event log, not ours. Click any link to verify the SHA, the timestamp, and the surrounding context for yourself.