signify-ts

Pass

Audited by Gen Agent Trust Hub on Feb 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's ready() function initializes the cryptographic environment by downloading the blake3 WebAssembly module from the well-known jsDelivr CDN (jsdelivr.net). This is a standard and safe deployment pattern for distributing versioned cryptographic assets to the browser.- [DATA_EXFILTRATION]: The library implements the 'signing at the edge' security model. Private key material is derived in-memory from a user-provided 21-character seed (bran) and is used to sign events locally, ensuring that sensitive credentials never leave the client environment.- [COMMAND_EXECUTION]: All network interactions are performed through the SignifyClient using structured and authenticated HTTP requests. The skill does not contain any patterns for executing arbitrary system commands or shell scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 26, 2026, 04:47 PM