apify-x402-agentic-wallet

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill instructs the agent to ask for and use a user-supplied verification code in shell commands and to paste raw command outputs verbatim (while also handling a session API token), which forces handling — and risks verbatim inclusion — of sensitive values in generated output.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The skill instructs collecting a user's email and verification code and performing on-chain payments with an agentic wallet — a flow that can be used to hijack/control funds or exfiltrate wallet-authenticating credentials if misused.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime the workflow fetches Apify Store search results, Actor docs, and dataset items via curl using user-supplied task terms (Step 4a https://api.apify.com/v2/store?search=..., Step 4b https://apify.com/<username>/<name>.md, and Step 4c dataset items), so outsider-authored free text from those pages/services can be ingested without preselecting a specific item beyond the user’s request.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs fetching Actor docs at runtime ("https://apify.com//.md") which provide input/templates the agent must follow, and to invoke remote execution via "https://api.apify.com/v2/acts/<username~name>/run-sync-get-dataset-items" which runs remote Actors, so remote content both controls agent behavior and executes code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly provides commands and a flow to control a Coinbase Agentic Wallet and to make on-chain/payments: it describes authenticating a wallet, checking balances and address, showing a QR for funding, and running a concrete payment command (npx awal x402 pay ...) to spend USDC on Base to buy prepaid Apify tokens. These are specific crypto/payment operations (wallet management and sending payments), so this grants direct financial execution capability.