Skip to main content

bots

Facilitates the creation of Towns Protocol bots with features for blockchain operations, message handling, and deployment.

Install this skill

or
87/100

Security score

The bots skill was audited on Feb 9, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 7

Webhook reference - potential data exfiltration

SourceSKILL.md
7"webhook", "bot deployment", "@towns-protocol/bot"
low line 87

Webhook reference - potential data exfiltration

SourceSKILL.md
87JWT_SECRET=<webhook_secret> # Min 32 chars
low line 104

Access to .env file

SourceSKILL.md
104process.env.APP_PRIVATE_DATA!,
low line 105

Access to .env file

SourceSKILL.md
105process.env.JWT_SECRET!,
low line 128

Access to .env file

SourceSKILL.md
128const env = EnvSchema.safeParse(process.env)
low line 89

External URL reference

SourceSKILL.md
89BASE_RPC_URL=https://base-mainnet.g.alchemy.com/v2/KEY # Recommended
low line 213

External URL reference

SourceSKILL.md
213'TX: https://basescan.org/tx/' + tx.txHash)
low line 253

External URL reference

SourceSKILL.md
253- **Developer Portal**: https://app.towns.com/developer
low line 255

External URL reference

SourceSKILL.md
255- **SDK**: https://www.npmjs.com/package/@towns-protocol/bot
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →