child-inscription
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
commanderlibrary to implement a CLI with subcommands (estimate,inscribe,reveal). These commands perform Bitcoin transaction construction and broadcasting through local library calls and official APIs. - [DATA_EXPOSURE]: The skill manages a local state file
.child-inscription-state.jsonto store transaction metadata (commit TXID, content, parent ID) between steps. This is a standard practice for multi-step Bitcoin operations and does not contain private keys or sensitive credentials. - [PRIVILEGE_ESCALATION]: The skill requires an unlocked wallet for signing transactions, which is standard for the intended blockchain functionality. It does not attempt to escalate system-level permissions.
- [SAFE]: The network operations are directed at legitimate Bitcoin mempool APIs for fee estimation and transaction broadcasting. The script logic strictly validates that the user owns the parent inscription before proceeding with the commit/reveal steps.
Audit Metadata