apify-x402-agentic-wallet

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The flow explicitly asks the agent to collect and embed user-supplied verification codes (and to obtain/use a session Apify token) into CLI/API commands and to print raw command/output (e.g., QR), which requires handling secret values verbatim and creates a high exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow uses curl to fetch outsider-authored free text from the public Apify Store and Actor docs pages (e.g., https://api.apify.com/v2/store?... and https://apify.com/<username>/<name>.md), which can contain arbitrary user-generated content that is then read and used as LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill requires running the CLI via "npx -y awal" at runtime, which fetches and executes the remote npm package (e.g., from https://registry.npmjs.org/awal), so external code is downloaded and executed and is a required dependency for the flow.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly provisions and uses a crypto smart-wallet and issues on-chain/payments: it instructs authenticating a Coinbase Agentic Wallet (npx awal auth ...), checking balances (npx awal balance --chain base), exposing the wallet address and QR for funding (curl .../wallet-qr?address=...), and — critically — performing an x402 payment via the command shown (npx awal x402 pay 'https://agi.apify.com/...prepaid-tokens?amount=1&currency=usd' --max-amount ... --json). Those commands are specific payment actions (USDC on Base, requiring ETH for deployment/gas) and thus provide direct financial execution capability (sending crypto/payments). This matches the crypto/wallet/payment-gateway criteria for Direct Financial Execution.