alby-bitcoin-payments
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes the Alby command-line interface tool using
npxto perform financial transactions and wallet management. - [EXTERNAL_DOWNLOADS]: Fetches the
@getalby/clipackage from the official npm registry at runtime. - [CREDENTIALS_UNSAFE]: Manages sensitive Nostr Wallet Connect (NWC) connection secrets stored in the
~/.alby-cli/directory andNWC_URLenvironment variable. The skill includes specific instructions to the agent to avoid printing or sharing these secrets. - [PROMPT_INJECTION]: The skill processes data from external sources which could serve as an attack surface for indirect prompt injection.
- Ingestion points: Data is ingested through the
fetchcommand (API responses) and thediscovercommand (service index results from 402index.io). - Boundary markers: The skill instructs the agent to inform the user of costs and URLs before processing unexpected payments, though it lacks explicit delimiters for processing remote content.
- Capability inventory: The skill has the capability to execute shell commands (
npx), write to the local file system (config files), and perform network operations. - Sanitization: No specific sanitization or filtering of external API content is defined before it is processed by the agent.
Audit Metadata