sbtc
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is implemented as a CLI tool using the 'commander' package, designed to be executed via 'bun run' within the agent's environment to perform blockchain operations.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external inputs such as Stacks addresses, Bitcoin transaction IDs, and data from blockchain APIs (Hiro, Mempool, Emily). While this constitutes a data ingestion surface, the skill utilizes structured JSON output and validates numeric inputs (amounts, fees), minimizing the risk of prompt injection from untrusted transaction data.
- [EXTERNAL_DOWNLOADS]: The skill interacts with well-known and reputable blockchain services, including Hiro's Stacks API for balance queries, Mempool.space for Bitcoin fee estimation and transaction exploration, and the Emily API for tracking sBTC peg operations. These interactions are standard for the skill's stated purpose of bridging and managing assets.
Audit Metadata