Nostr Army Knife (nak)

• Outcome: Pass
• Latest audit: May 28, 2026 at 4:45 AM UTC
• Version:
  0.1.0

Overview

This skill is a documentation-only helper for the legitimate nak Nostr CLI, but it involves sensitive keys, public posts, payments, uploads, and MCP access that users should handle carefully.

Install this only if you already intend to use nak. Use a dedicated or limited Nostr key where possible, avoid putting main secret keys in logs, scripts, shared terminals, or broad environment variables, and manually review any command that posts publicly, pays an invoice, uploads a file, changes relays or servers, or starts MCP mode.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill documentation encourages use of highly sensitive operations—passing secret keys on the command line, setting long-lived secret environment variables, paying Lightning invoices, publishing signed events, and uploading files—without clear warnings about credential exposure, shell history/process-list leakage, irreversible network publication, payment finality, or untrusted remote endpoints. In an agentic setting, this is more dangerous because an automated agent may execute examples directly, mishandle secrets, or trigger real external side effects without sufficient confirmation.

VirusTotal

65/65 vendors flagged this skill as clean.