opns
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions include a requirement to install external Node.js dependencies (
@1sat/actions,@1sat/wallet,@bsv/sdk) using the shell commandbun add. - [EXTERNAL_DOWNLOADS]: The skill communicates with external endpoints
https://api.1sat.appandhttps://1sat.nameto perform name resolution, fetch blockchain metadata, and manage the name lifecycle. - [INDIRECT_PROMPT_INJECTION]: The skill processes metadata and identity keys (
opns.idKey) retrieved from a blockchain indexer, which represents an ingestion point for untrusted external data. - Ingestion points: Metadata is retrieved via
OpnsClientandOrdfsClient(SKILL.md). - Boundary markers: None present in the provided code snippets to delimit untrusted blockchain data from agent instructions.
- Capability inventory: The skill possesses the ability to broadcast transactions (
sendOpns,sellOpns) and manage local wallet state via a basket system. - Sanitization: There is no evidence of sanitization or validation performed on the blockchain map data before processing.
Audit Metadata