charms
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of CLI tools including 'charms', 'bitcoin-cli', 'cargo', and 'rustup' to compile Wasm-based Bitcoin applications and manage transaction lifecycles.
- [EXTERNAL_DOWNLOADS]: Setup instructions include installing the 'charms' package from the official Rust crates.io registry and adding the 'wasm32-wasip1' target via the standard 'rustup' toolchain.
- [PROMPT_INJECTION]: The workflow utilizes 'envsubst' to interpolate environment variables into YAML spell templates; this is identified as a surface for indirect injection should an attacker control the content of the environment variables used in the templating process.
Audit Metadata