algorand-x402-python

SUSPICIOUS. The skill is largely coherent with its stated purpose and uses normal PyPI installs, but it handles private keys and enables on-chain payment actions, and several examples rely on a third-party facilitator endpoint. This is not confirmed malware, but it is a high-impact financial integration skill with moderate trust and credential-forwarding risk.

No clear malicious behavior or supply-chain malware is present. The code implements an Algorand payment facilitator and intentionally handles a private signing key. The principal security concern is insufficient local validation before signing caller-supplied transaction bytes: if upstream facilitator validation is absent or bypassable, an attacker could potentially obtain signatures for unauthorized transactions. Raw exception responses also disclose internal details. Review the imported facilitator validation and restrict direct access to signer methods before production deployment.