btc
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes Bitcoin addresses and transaction metadata from external APIs, creating a surface for indirect prompt injection which is inherent to its blockchain management purpose.
- Ingestion points: Bitcoin addresses from CLI arguments and transaction data from mempool.space and Unisat APIs.
- Boundary markers: None explicitly defined for API data ingestion.
- Capability inventory: The skill can broadcast Bitcoin transactions and transfer funds via the transfer command.
- Sanitization: Validates transaction amounts and fee rates as integers; uses structured transaction builders for signing.
- [EXTERNAL_DOWNLOADS]: The skill fetches blockchain information from well-known services including mempool.space and the Unisat API for operational data.
Audit Metadata