agent-payment-x402
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
agentwallet-sdkpackage from the NPM registry and references integration guides from the official OKX Payments GitHub repository. - [DYNAMIC_EXECUTION]: The payment server is executed dynamically using
npx. The documentation provides security best practices, such as pinning the package to a specific version (agentwallet-sdk@6.0.0) and restricting environment variable access to the subprocess. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with external 402-gated APIs, creating an attack surface where external responses could attempt to influence agent behavior.
- Ingestion points: x402 negotiation headers and machine-negotiable payment flow responses described in
SKILL.md. - Boundary markers: The instructions mandate that spending policies and budgets must be set by the orchestrator before delegating to the agent, ensuring the agent cannot escalate its own limits.
- Capability inventory: Includes tools for wallet management, balance checks, and payment execution (
send_payment). - Sanitization: Provided orchestration examples demonstrate rigorous validation of cost inputs and budget checks before authorizing transactions.
Audit Metadata