bsv-standards
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE] (SAFE): The skill consists entirely of Markdown reference files (
SKILL.md,references/*.md). There are no executable scripts (.sh, .py, .js) or configuration files that trigger command execution. - [EXTERNAL_DOWNLOADS] (SAFE): While the skill contains numerous links to external documentation (e.g., bsv.brc.dev, bitcoinschema.org) and GitHub repositories (e.g., b-open-io, BitcoinSchema), these are standard ecosystem resources and are not used for automated downloads or remote code execution.
- [CREDENTIALS_UNSAFE] (SAFE): The documentation includes placeholder private key formats (e.g.,
privateKeyWif: "L1...") used in code examples. No real secrets or credentials were found. - [INDIRECT_PROMPT_INJECTION] (LOW): The skill documents protocols (MAP, B, Ordinals) used to read data from the BSV blockchain. While fetching untrusted data from a blockchain presents a potential surface for indirect prompt injection, this skill does not provide the implementation for doing so, nor does it have capabilities to execute commands based on that data.
- Ingestion points: External APIs and gateways mentioned (ordfs.network, gorillapool.io).
- Boundary markers: N/A (Documentation only).
- Capability inventory: None.
- Sanitization: N/A.
Audit Metadata