alby-bitcoin-builder
Pass
Audited by Gen Agent Trust Hub on May 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of official Alby SDKs and Lightning tools from npm and the esm.sh CDN. These are verified vendor resources used for wallet integration. \n- [COMMAND_EXECUTION]: Documentation provides command-line examples for initializing projects and installing dependencies using npx, npm, and yarn. \n- [DATA_EXFILTRATION]: The skill performs legitimate network operations to interact with Lightning Network nodes and the Alby testing faucet (faucet.nwc.dev) for wallet provisioning and payment processing. \n- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing external data from Nostr relays and Lightning invoices, which constitutes an attack surface for indirect prompt injection. \n- Ingestion points: references/nwc-client/notifications.md (Nip47 notification events processed via subscribeNotifications). \n- Boundary markers: Absent. No specific delimiters or safety instructions are used when interpolating external notification data into the agent context. \n- Capability inventory: High-privilege wallet operations including payInvoice, sendPayment, and makeHoldInvoice as detailed in references/nwc-client/nwc.d.ts and references/nwc-client/nwc-client.md. \n- Sanitization: Implementation examples do not include sanitization for invoice descriptions or notification metadata before use in application logic.
Audit Metadata