search-for-service
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
npx awal@2.8.2to execute its functionality. This command downloads the specified version of theawalpackage from the NPM registry at runtime. As this is the official tool for interacting with the Coinbase Developer Platform (CDP) bazaar and is pinned to a specific version, this is considered a safe and intended dependency. - [COMMAND_EXECUTION]: The skill executes shell commands restricted to the
awalutility. These commands are used to query the CDP API for marketplace listings and to inspect the payment headers of external API endpoints. The scope of these commands is limited via theallowed-toolsconfiguration to ensure they cannot be used for arbitrary execution. - [SAFE]: The network operations performed by the
detailscommand are used to detect x402 payment requirements on API endpoints. While this involves requests to external URLs, it is the primary function of the skill and does not involve the exfiltration of sensitive local data.
Audit Metadata