codevasp-travel-rule-guide
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill operates as a specialized knowledge base for the CodeVASP protocol, referencing local guides and schemas to provide deterministic and accurate compliance information.
- [COMMAND_EXECUTION]: The repository includes industry-standard build automation tools, specifically a Gradle wrapper comprising the
gradlewscript andgradle-wrapper.jar. These components are used to compile and run the provided Java implementation samples. - [CREDENTIALS_UNSAFE]: Implementation samples in Java, Python, and Node.js contain hardcoded cryptographic keys and identifiers. These are explicitly marked as test data or sample keys for demonstration and testing purposes, allowing developers to verify protocol logic without initial setup.
- [PROMPT_INJECTION]: The skill contains instructions for the AI to validate user-provided JSON payloads against a fixed schema. This is a secure implementation of data ingestion that relies on structural validation rather than executing instructions contained within user data.
- [EXTERNAL_DOWNLOADS]: The configuration for the Java build system references the official Gradle distribution servers to download the appropriate build environment. This is a reference to a well-known service and is standard practice in development tools.
Audit Metadata