tokens
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of external Node.js packages to interact with the Bitcoin SV (BSV) blockchain and the BSV21 token protocol.- Packages:
@1sat/actions,@1sat/wallet,@1sat/templates, and@bsv/sdk.- Source: These are standard libraries for BSV21 token management, installed from the NPM registry.- [PROMPT_INJECTION]: The skill processes data from the blockchain, which creates an attack surface for indirect prompt injection.- Ingestion points: External data is ingested through thegetBsv21BalancesandlistBsv21actions (SKILL.md).- Boundary markers: No explicit delimiters are used in the prompt templates to separate external token metadata from agent instructions.- Capability inventory: The skill is capable of performing high-impact actions, such as sending tokens (sendBsv21) and issuing new tokens (deployBsv21Mint).- Sanitization: The provided documentation and code snippets do not include sanitization or validation of ingested blockchain metadata.
Audit Metadata