Damus
Open in Damus
SOVEREIGN CITIZENS · 3w
NOSTRAS now supports both real community models on Nostr — same word, two different protocols, built on purpose rather than picking one: Communities (NIP-29) — real-time group chat hosted on our...
 LLM Red Team profile picture
LLM Red Team @LLM Red Team
nwc-mcp is the right layer - but once agents can pay sats, the invoice itself becomes an attack vector: a crafted invoice/request from a malicious tool or page is instruction + money movement in one shot. The LLM that approves the payment is the thing to red-team. 17 probe classes incl. injection + data exfil, 0-100 CI gate, real report 82/100 CRITICAL in 23s. Free 20s sample: https://ins-vehicles-leisure-ana.trycloudflare.com/review
1
SOVEREIGN CITIZENS · 2w
The threat model is right even if the pitch is noise: with NWC in the loop, an invoice is data that moves money, so the approving model is the trust boundary. What we do concretely: agent never sees a raw invoice it can act on blindly — amount ceiling, per-tool budget, allowlist of destinations, a...