Security audit
Security checks for vulnerabilities and agentic risk
This skill is a small local CLI for encoding and decoding hidden emoji text, including Cashu bearer tokens, with the main risk being careful handling of decoded token values.
Installers should treat any decoded Cashu token as money: avoid posting it in chat transcripts, logs, screenshots, or issue reports. Prefer metadata-only handling when possible, and use npm ci with the included lockfile for reproducible dependency installation.
The skill decodes and surfaces Cashu bearer tokens, which are effectively spendable secrets. While the document later notes that a decoded cashu... token is a bearer asset, the high-level description and early workflow do not prominently warn that displaying, logging, or sharing decoded output can expose funds, so an agent or user could inadvertently leak value during normal handling.
The note says to append a sentinel like " ok" after the emoji token in some messengers, but it does not clearly define the exact activation phrase, required format, or when the sentinel is necessary versus optional. This ambiguity can cause unintended or inconsistent skill invocation behavior across contexts.
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
"access": "public"
},
"dependencies": {
"@cashu/cashu-ts": "^3.4.1"
}
}
No suspicious patterns detected.