breeze-x402-payment-api

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of several Node.js packages from the @faremeter scope and the official @solana/web3.js library. These are standard dependencies for the x402 protocol and Solana blockchain interactions required by the skill.
  • [COMMAND_EXECUTION]: Instructions are provided for the agent to execute specific Node.js scripts (generate-wallet.js, deposit.js) to manage keys and perform on-chain operations. These commands are transparently described as the primary workflow for the skill.
  • [PROMPT_INJECTION]: The skill represents a surface for indirect instructions through transaction data ingested from the Breeze API. This is a functional requirement for the skill's automation of DeFi transactions.
  • Ingestion points: SKILL.md (Transaction strings returned from the /deposit and /withdraw endpoints at https://x402.breeze.baby).
  • Boundary markers: None (the skill expects raw transaction strings from the API).
  • Capability inventory: The skill uses the Solana SDK to sign transactions with the user's private key and broadcast them to the network via connection.sendRawTransaction.
  • Sanitization: The skill uses standard deserialization methods (VersionedTransaction.deserialize or Transaction.from) provided by the @solana/web3.js library.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 03:48 PM
Security Audit — agent-trust-hub — breeze-x402-payment-api