search-for-service

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx awal@2.8.2 to execute its functionality. This command downloads the specified version of the awal package from the NPM registry at runtime. As this is the official tool for interacting with the Coinbase Developer Platform (CDP) bazaar and is pinned to a specific version, this is considered a safe and intended dependency.
  • [COMMAND_EXECUTION]: The skill executes shell commands restricted to the awal utility. These commands are used to query the CDP API for marketplace listings and to inspect the payment headers of external API endpoints. The scope of these commands is limited via the allowed-tools configuration to ensure they cannot be used for arbitrary execution.
  • [SAFE]: The network operations performed by the details command are used to detect x402 payment requirements on API endpoints. While this involves requests to external URLs, it is the primary function of the skill and does not involve the exfiltration of sensitive local data.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 04:26 AM