agentic-gateway
Warn
Audited by Snyk on Jun 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill is explicitly designed to perform payments. It defines two payment protocols (x402 and MPP), requires wallet-based auth and wallet bootstrap/funding with USDC, documents payment creation workflows (e.g., "x402 payment creation from a 402 response", "MPP payment creation from a 402 response"), and references specific payment libraries and gateways (e.g., @alchemy/x402, @x402/fetch/@x402/axios, mppx, Tempo on-chain USDC, and Stripe credit-card flow). It uses payment-specific headers (Payment-Signature, Authorization: Payment ), and instructs how to generate and attach payment credentials/receipts. These are concrete, purpose-built payment and crypto transaction capabilities (on-chain USDC and card payments), not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata