buzz-relay-self-host
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include cloning the official repository from
github.com/block/buzzand pulling container images fromghcr.io/block/buzz. These references target the official resources of the software being deployed. - [COMMAND_EXECUTION]: The skill provides various shell scripts and documentation examples that use standard system tools like
docker,curl, andopenssl. These are used for administrative tasks such as service management, health checks, and generating cryptographic keys. - [DYNAMIC_EXECUTION]: Python snippets are embedded within documentation and scripts to handle tasks that require specific libraries, such as image processing (Pillow) and cryptographic public key derivation (coincurve). These snippets are transparent and used for legitimate configuration purposes.
- [CREDENTIALS_UNSAFE]: The skill manages sensitive Nostr private keys but adheres to security best practices by instructing users to store them in
.envfiles protected by strict file permissions (chmod 600) and explicitly warns against hardcoding secrets or pasting them into chat interfaces. - [PERSISTENCE]: The skill provides a standard systemd user unit template to ensure the agent bridge remains active across reboots, which is a common and documented requirement for 'always-on' service agents.
Audit Metadata