skills/b-open-io/1sat-sdk/tokens/Gen Agent Trust Hub

tokens

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of external Node.js packages to interact with the Bitcoin SV (BSV) blockchain and the BSV21 token protocol.- Packages: @1sat/actions, @1sat/wallet, @1sat/templates, and @bsv/sdk.- Source: These are standard libraries for BSV21 token management, installed from the NPM registry.- [PROMPT_INJECTION]: The skill processes data from the blockchain, which creates an attack surface for indirect prompt injection.- Ingestion points: External data is ingested through the getBsv21Balances and listBsv21 actions (SKILL.md).- Boundary markers: No explicit delimiters are used in the prompt templates to separate external token metadata from agent instructions.- Capability inventory: The skill is capable of performing high-impact actions, such as sending tokens (sendBsv21) and issuing new tokens (deployBsv21Mint).- Sanitization: The provided documentation and code snippets do not include sanitization or validation of ingested blockchain metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 03:11 PM