lookup-bsv-address
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a utility for querying blockchain data for Bitcoin SV addresses. The logic is transparently implemented in TypeScript and executed via the Bun runtime.
- [EXTERNAL_DOWNLOADS]: The
scripts/lookup.tsfile performs HTTP GET requests toapi.whatsonchain.comto retrieve balance data. WhatsOnChain is a well-known service in the blockchain ecosystem. The network operations are limited to this specific domain and do not involve downloading or executing external scripts. - [COMMAND_EXECUTION]: The skill uses the
Bash(bun:*)tool to execute its own local script. The user-provided address input is strictly validated against a Bitcoin/BSV address regular expression before being interpolated into the API URL, preventing command injection or directory traversal attacks. - [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were detected. The script processes numeric data from the API and does not evaluate it as code or instructions.
Audit Metadata