nostr-bunker-integration

Pass

Audited by Gen Agent Trust Hub on Mar 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Documentation promotes protocol-level security by mandating NIP-44 encryption for kind:24133 transport events, ensuring private key operations remain secure and confidential.
  • [EXTERNAL_DOWNLOADS]: Recommends established and well-known libraries including @nostr/tools and @nostr-dev-kit/ndk. These are standard dependencies in the Nostr development community.
  • [PROMPT_INJECTION]: The URI parsing utility script in scripts/bunker-url-tools.ts handles external input safely. Ingestion points: Command-line arguments. Boundary markers: Strict regex validation for bunker:// and nostrconnect:// schemes. Capability inventory: No network access or subprocess execution. Sanitization: Validation of hex pubkeys and relay URL schemes.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 8, 2026, 09:27 PM