nunchuk-wallet-transactions
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a legitimate utility for the nunchuk wallet, providing functional commands for transaction lifecycle management (drafting, signing, broadcasting) that are consistent with its stated purpose and the identity of the author (nunchuk-io).
- [INDIRECT_PROMPT_INJECTION]: The skill contains a vulnerability surface where untrusted data could influence command execution.
- Ingestion points: User-provided inputs such as
<address>,<amount>,<wallet-id>, and<signed-psbt-base64>are used as arguments in shell commands throughoutSKILL.md. - Boundary markers: No delimiters or instructions to ignore embedded formatting are present in the command templates.
- Capability inventory: The skill utilizes shell execution for the
nunchukCLI tool to perform sensitive financial operations. - Sanitization: There are no instructions for sanitizing or validating user input before it is passed to the CLI.
- Note: This ingestion surface is typical for CLI-wrapping skills and is documented here as a potential risk factor rather than an active malicious exploit.
Audit Metadata