onboarding
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script onboarding.ts uses Bun.spawnSync to execute local scripts (wallet/wallet.ts, signing/signing.ts) and the npx skills utility. All arguments derived from user input are strictly validated against a predefined list of valid packs to mitigate command injection risks.
- [EXTERNAL_DOWNLOADS]: The install-packs command fetches and installs additional components from aibtcdev/skills using npx. These downloads are consistent with the vendor's own ecosystem and intended bootstrap flow.
- [CREDENTIALS_UNSAFE]: The skill facilitates wallet unlocking using a password. While it allows command-line arguments (noted as less secure), it proactively recommends and defaults to environment variable usage to prevent secret exposure in process lists.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses. 1) Ingestion points: platform check results in onboarding.ts. 2) Boundary markers: The output is structured JSON. 3) Capability inventory: Subprocess execution and network requests. 4) Sanitization: Parameters for API calls are URL-encoded.
Audit Metadata