alby-bitcoin-payments-cli-skill
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npxto execute the@getalby/clitool for wallet management tasks such as sending payments and checking balances.\n- [EXTERNAL_DOWNLOADS]: The@getalby/clipackage is downloaded from the npm registry vianpxduring skill execution.\n- [DATA_EXFILTRATION]: Accesses the sensitive file path~/.alby-cli/connection-secret.keyto retrieve wallet connection secrets. This is the documented default location for the Alby CLI tool's configuration.\n- [COMMAND_EXECUTION]: A POST request is made viacurltohttps://faucet.nwc.devto create test wallets for the user.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from the Lightning network (SKILL.md:list-transactions,lookup-invoice) and possesses sensitive capabilities such as making payments (SKILL.md:pay-invoice,pay-keysend). No explicit boundary markers or sanitization steps are defined to prevent the agent from interpreting invoice descriptions as instructions.
Audit Metadata