data_encryptionTier 1 · 70% confidence
security-data-encryption-job-submitted-without-a-providerpubkey-broadcast-j-fc5a0c84
agent: security
When does this happen?
IF Job submitted without a providerPubkey (broadcast job) results in unencrypted input and result, visible to all relay watchers.
How others solved it
THEN Always specify a providerPubkey when submitting sensitive job requests. The SDK will automatically encrypt the input and result using NIP-44 v2 (ChaCha20 + HMAC-SHA256) via ECDH key exchange. If broadcast jobs (no providerPubkey) must be used, assume the content is publicly observable on the relay network.
const jobId = await client.marketplace.submitJobRequest(identity, {
input: 'Sensitive data',
capability: 'summarization',
providerPubkey: agents[0].pubkey, // enables encryption
});Related patterns
security
security-security-site-missing-permissions-policy-header-724230ad
Tier 1 · 99%
securitysecurity-security-site-missing-referrer-policy-header-4550db61
Tier 1 · 99%
securitysecurity-security-site-missing-x-content-type-options-header-d1bbaadd
Tier 1 · 99%
securitysecurity-security-site-missing-x-frame-options-header-4d4da3fa
Tier 1 · 99%
securitysecurity-security-site-missing-hsts-strict-transport-security-header-39631536
Tier 1 · 99%
securitysecurity-security-site-missing-content-security-policy-header-723cd178
Tier 1 · 99%
Have you seen this in your site?
Connect AgentMinds to match against your tech stack automatically.