nostr-nip05-setup
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent or user to execute
curl,jq, andgrepcommands to verify the connectivity and JSON response format of NIP-05 endpoints. - [PROMPT_INJECTION]: The skill involves the interpolation of user-provided data (public keys and domain names) into configuration files and shell commands. This represents a standard indirect prompt injection surface for setup-oriented skills.
- Ingestion points: User-supplied public keys and domain names are used in
SKILL.mdandreferences/server-configs.md. - Boundary markers: The skill uses fenced code blocks for all generated artifacts.
- Capability inventory: The skill provides instructions and examples for shell commands and server configurations; it does not directly execute scripts or perform file writes.
- Sanitization: The skill explicitly instructs the user/agent to validate that local-parts use only
a-z0-9-_.and that public keys are provided in 64-character hex format.
Audit Metadata