taproot-multisig
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs standard cryptographic operations using well-known libraries (@noble/curves and @scure/base). All operations are local and do not involve unauthorized network communication, file system modifications, or persistence mechanisms.
- [INDIRECT_PROMPT_INJECTION]: The
verify-cosigcommand processes external cryptographic data provided via command-line arguments, creating a surface for indirect prompt injection if an attacker provides malicious inputs. - Ingestion points: Command-line arguments
--digest,--signature, and--public-keyintaproot-multisig.ts. - Boundary markers: None; arguments are parsed directly from the CLI environment.
- Capability inventory: The skill is limited to cryptographic verification and JSON output; it lacks capabilities for network access, file writing, or process execution.
- Sanitization: The skill implements strict input validation, including hex-decoding and exact length checks (32-byte digests and public keys, 64-byte signatures) before processing data with the Schnorr verification function.
Audit Metadata