maximumsats-wot
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as described, querying a Nostr Web of Trust service. No malicious patterns or unauthorized behaviors were detected during analysis.
- [DATA_EXFILTRATION]: The skill transmits Nostr pubkeys to the specified API endpoint (wot.klabo.world) to retrieve trust metrics. This is the primary function of the skill and does not involve unauthorized data movement.
- [CREDENTIALS_UNSAFE]: Authentication tokens for the L402 protocol are retrieved from environment variables or the agent's secure credential store. No hardcoded credentials or insecure handling of secrets were found.
- [INDIRECT_PROMPT_INJECTION]: The skill monitors trust score data from the external API to trigger alerts.
- Ingestion points: API responses processed in cli.ts and sensor.ts.
- Boundary markers: Data is parsed as JSON; no explicit prompt delimiters are used in alert generation.
- Capability inventory: Network fetch to API, file system read/write for configuration and state files.
- Sanitization: The implementation in sensor.ts strictly validates that score values are numeric before comparison, preventing instruction injection from the remote source.
Audit Metadata