lnurl-auth
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill correctly implements the LUD-04 protocol for secure Lightning-based authentication.
- [SAFE]: Private keys are handled securely. The master secret is stored in
~/.config/lnurl-auth/master.key(or a path specified by the user) with restricted0600(user-only) file permissions. - [SAFE]: The tool uses per-domain key derivation (HMAC-SHA256) which prevents cross-service correlation, maintaining user privacy as per LUD-05/LUD-13 standards.
- [SAFE]: Network activity is restricted to protocol-defined challenge retrieval and signature submission to callback URLs decoded from the user-provided bech32 LNURL string.
- [SAFE]: No obfuscation, malicious command execution, or unauthorized data exfiltration patterns were identified in the source code. Static analysis hits on hex blobs in cryptographic libraries were manually verified as benign constants and test vectors.
Audit Metadata