skills/aibtcdev/skills/stx/Gen Agent Trust Hub

stx

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill defines a CLI tool (stx.ts) that executes various Stacks blockchain operations. It also instructs the agent to use bun run wallet/wallet.ts unlock for session management, which is a standard procedure for this ecosystem's wallet handling.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the Hiro API regarding transaction statuses and account balances. While this provides an attack surface for indirect injection if the API were compromised, the skill uses structured JSON output and the agent is instructed to perform safety checks (e.g., verifying contract source code and checking balances before transfers) to mitigate these risks.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with the Hiro API (api.hiro.so) and various Stacks explorers to fetch blockchain data and broadcast transactions. These are well-known and trusted services within the Stacks developer community.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 05:03 AM