alby-bitcoin-payments

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes the Alby command-line interface tool using npx to perform financial transactions and wallet management.
  • [EXTERNAL_DOWNLOADS]: Fetches the @getalby/cli package from the official npm registry at runtime.
  • [CREDENTIALS_UNSAFE]: Manages sensitive Nostr Wallet Connect (NWC) connection secrets stored in the ~/.alby-cli/ directory and NWC_URL environment variable. The skill includes specific instructions to the agent to avoid printing or sharing these secrets.
  • [PROMPT_INJECTION]: The skill processes data from external sources which could serve as an attack surface for indirect prompt injection.
  • Ingestion points: Data is ingested through the fetch command (API responses) and the discover command (service index results from 402index.io).
  • Boundary markers: The skill instructs the agent to inform the user of costs and URLs before processing unexpected payments, though it lacks explicit delimiters for processing remote content.
  • Capability inventory: The skill has the capability to execute shell commands (npx), write to the local file system (config files), and perform network operations.
  • Sanitization: No specific sanitization or filtering of external API content is defined before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 11:41 PM
Security Audit — agent-trust-hub — alby-bitcoin-payments