compose-bitcoin-oracle

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a troubleshooting step to run rm -rf .compose/. This is a targeted command to clear a local framework-specific cache folder and does not affect system-critical directories.
  • [EXTERNAL_DOWNLOADS]: The skill fetches boilerplate code from the author's official GitHub repository (goldsky-io/documentation-examples) using degit and git clone. These are standard methods for project initialization from trusted vendor resources.
  • [CREDENTIALS_UNSAFE]: The instructions describe an optional developer workflow for generating a temporary blockchain account (EOA) for testing on non-sponsored chains. It includes security best practices such as using shred to delete temporary JSON files and storing keys in local environment files (.eoa.env), which is a standard practice for secret management in development environments.
  • [PROMPT_INJECTION]: The instructions contain steering logic that guides the agent to use specific tools (like deployComposeApp) when available, while suppressing terminal commands to optimize the user experience for web-based interfaces. These are platform-specific operational instructions rather than attempts to bypass safety guardrails.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 07:04 PM
Security Audit — agent-trust-hub — compose-bitcoin-oracle