strk20-privacy
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions in
SKILL.mddirect the agent to execute a bundled Python utilityscripts/check_freshness.pyto ensure that version numbers and documentation links remain accurate relative to the live protocol status. - [EXTERNAL_DOWNLOADS]: The bundled freshness script performs network requests to several external domains to validate protocol metadata and documentation availability. Targeted domains include
registry.npmjs.org,raw.githubusercontent.com(forstarkware-libsandstarknet-specs),strk20-by-example.org, andstrk20.starknet.io. These are read-only status checks against well-known ecosystem resources. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from protocol websites to update the agent's internal state.
- Ingestion points: Output of the
scripts/check_freshness.pyscript, which fetches versioning and liveness data from external URLs. - Boundary markers: Absent from the script output processing instructions.
- Capability inventory: The skill allows for documentation retrieval and routing advice; the utility script includes network operations (
urllib.request) but no file-write or code-execution capabilities. - Sanitization: The script uses standard JSON parsing and regex for fact extraction, providing a low-risk interface for factual updates.
Audit Metadata