compose-bitcoin-oracle
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a troubleshooting step to run
rm -rf .compose/. This is a targeted command to clear a local framework-specific cache folder and does not affect system-critical directories. - [EXTERNAL_DOWNLOADS]: The skill fetches boilerplate code from the author's official GitHub repository (
goldsky-io/documentation-examples) usingdegitandgit clone. These are standard methods for project initialization from trusted vendor resources. - [CREDENTIALS_UNSAFE]: The instructions describe an optional developer workflow for generating a temporary blockchain account (EOA) for testing on non-sponsored chains. It includes security best practices such as using
shredto delete temporary JSON files and storing keys in local environment files (.eoa.env), which is a standard practice for secret management in development environments. - [PROMPT_INJECTION]: The instructions contain steering logic that guides the agent to use specific tools (like
deployComposeApp) when available, while suppressing terminal commands to optimize the user experience for web-based interfaces. These are platform-specific operational instructions rather than attempts to bypass safety guardrails.
Audit Metadata