nostr-wot
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API endpoints (wot.klabo.world and maximumsats.com) which is then output to the agent. This content is not sanitized or wrapped in boundary markers, potentially allowing a malicious API response to influence agent behavior.
- Ingestion points: API responses in
freeGetandpaidWotReportfunctions withinnostr-wot.ts. - Boundary markers: None present in the output provided to the agent.
- Capability inventory: The skill has permissions to read and write files in the
~/.aibtc/nostr-wot/directory and perform network requests (GET/POST). - Sanitization: External API data is parsed as JSON and logged directly to the console without filtering or escaping content.
Audit Metadata