nostr
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch and process external Markdown documentation from the nostr-protocol repository on GitHub, which introduces a potential surface for indirect prompt injection.
- Ingestion points: URLs for README.md and individual NIP .md files located in SKILL.md.
- Boundary markers: No delimiters or specific ignore instructions are provided for the external content.
- Capability inventory: The skill does not include any executable scripts, tools, or commands for file system or network modification.
- Sanitization: The skill does not define methods for validating or sanitizing the retrieved documentation.
Audit Metadata