stx
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill defines a CLI tool (
stx.ts) that executes various Stacks blockchain operations. It also instructs the agent to usebun run wallet/wallet.ts unlockfor session management, which is a standard procedure for this ecosystem's wallet handling. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the Hiro API regarding transaction statuses and account balances. While this provides an attack surface for indirect injection if the API were compromised, the skill uses structured JSON output and the agent is instructed to perform safety checks (e.g., verifying contract source code and checking balances before transfers) to mitigate these risks.
- [EXTERNAL_DOWNLOADS]: The skill interacts with the Hiro API (api.hiro.so) and various Stacks explorers to fetch blockchain data and broadcast transactions. These are well-known and trusted services within the Stacks developer community.
Audit Metadata