inscription-queue-watcher
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs read-only monitoring operations. All network requests target vendor-related infrastructure (aibtc.news) or well-known public Bitcoin services (mempool.space), which is consistent with the skill's stated purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external APIs, representing a theoretical attack surface for indirect prompt injection.
- Ingestion points: Brief data and transaction status are retrieved via
fetchfromhttps://aibtc.news/api/brief/andhttps://mempool.space/api/tx/inlib.ts. - Boundary markers: None; the skill emits structured JSON reports which naturally separates data from instructions.
- Capability inventory: The skill is restricted to observational network operations and lacks file system write access, shell command execution, or dynamic code evaluation capabilities.
- Sanitization: Input validation is performed on Bitcoin addresses using regex in
lib.ts(BECH32_BTC_ADDRESS), and output is strictly formatted via JSON serialization.
Audit Metadata