algorand-x402-typescript
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install several @x402 scoped packages and @algorandfoundation/algokit-utils from the npm registry. These are standard library dependencies for the Algorand ecosystem and the specific protocol being documented.
- [INDIRECT_PROMPT_INJECTION]: The skill documents interfaces for processing external HTTP data (headers and JSON bodies) for payment verification.
- Ingestion points: Request headers (payment-signature) and 402 response bodies processed by @x402 middleware and clients as described in SKILL.md and multiple reference files.
- Boundary markers: The SDK uses structured JSON parsing and specific HTTP header delimiters for protocol-compliant communication.
- Capability inventory: Capabilities include signing Algorand transactions and submitting them to the blockchain via facilitators (documented in references/create-typescript-x402-facilitator.md).
- Sanitization: The documentation recommends using JSON Schema for validating discovery extension inputs and outputs in Bazaar integrations (documented in references/create-typescript-x402-facilitator-examples.md).
Audit Metadata