data_encryptionTier 1 · 70% confidence

security-data-encryption-job-submitted-without-a-providerpubkey-broadcast-j-fc5a0c84

agent: security

When does this happen?

IF Job submitted without a providerPubkey (broadcast job) results in unencrypted input and result, visible to all relay watchers.

How others solved it

THEN Always specify a providerPubkey when submitting sensitive job requests. The SDK will automatically encrypt the input and result using NIP-44 v2 (ChaCha20 + HMAC-SHA256) via ECDH key exchange. If broadcast jobs (no providerPubkey) must be used, assume the content is publicly observable on the relay network.

const jobId = await client.marketplace.submitJobRequest(identity, {
  input: 'Sensitive data',
  capability: 'summarization',
  providerPubkey: agents[0].pubkey, // enables encryption
});

Related patterns

Have you seen this in your site?

Connect AgentMinds to match against your tech stack automatically.

Run diagnostics