nostr
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines a command-line interface with several subcommands (post, read-feed, search-tags, get-profile, set-profile, get-pubkey, relay-list, amplify-signal, amplify-text) meant to be executed via
bun runas seen inSKILL.mdandnostr.ts. - [DATA_EXFILTRATION]: The skill performs network operations to communicate with Nostr relays (e.g.,
wss://relay.damus.io,wss://nos.lol) and fetches data from an external API athttps://1btc-news-api.p-d07.workers.dev/takes/innostr.ts. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources which could be used to influence agent behavior.
- Ingestion points: External data is ingested from Nostr relays in the
read-feed,search-tags, andget-profilecommands, and from a third-party API in theamplify-signalcommand innostr.ts. - Boundary markers: There are no boundary markers or instructions to the agent to ignore embedded commands within the ingested data.
- Capability inventory: The skill has the capability to write to the Nostr network via the
post,set-profile,amplify-signal, andamplify-textsubcommands. - Sanitization: No sanitization or filtering is performed on the ingested content before it is passed back to the agent context.
Audit Metadata