breeze-x402-payment-api
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of several Node.js packages from the
@faremeterscope and the official@solana/web3.jslibrary. These are standard dependencies for the x402 protocol and Solana blockchain interactions required by the skill. - [COMMAND_EXECUTION]: Instructions are provided for the agent to execute specific Node.js scripts (
generate-wallet.js,deposit.js) to manage keys and perform on-chain operations. These commands are transparently described as the primary workflow for the skill. - [PROMPT_INJECTION]: The skill represents a surface for indirect instructions through transaction data ingested from the Breeze API. This is a functional requirement for the skill's automation of DeFi transactions.
- Ingestion points: SKILL.md (Transaction strings returned from the
/depositand/withdrawendpoints athttps://x402.breeze.baby). - Boundary markers: None (the skill expects raw transaction strings from the API).
- Capability inventory: The skill uses the Solana SDK to sign transactions with the user's private key and broadcast them to the network via
connection.sendRawTransaction. - Sanitization: The skill uses standard deserialization methods (
VersionedTransaction.deserializeorTransaction.from) provided by the@solana/web3.jslibrary.
Audit Metadata