signify-ts
Pass
Audited by Gen Agent Trust Hub on Feb 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's
ready()function initializes the cryptographic environment by downloading theblake3WebAssembly module from the well-known jsDelivr CDN (jsdelivr.net). This is a standard and safe deployment pattern for distributing versioned cryptographic assets to the browser.- [DATA_EXFILTRATION]: The library implements the 'signing at the edge' security model. Private key material is derived in-memory from a user-provided 21-character seed (bran) and is used to sign events locally, ensuring that sensitive credentials never leave the client environment.- [COMMAND_EXECUTION]: All network interactions are performed through theSignifyClientusing structured and authenticated HTTP requests. The skill does not contain any patterns for executing arbitrary system commands or shell scripts.
Audit Metadata