agent-payment-x402
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious behavior, prompt injections, or obfuscation were detected. The skill provides a legitimate utility for autonomous payments with an emphasis on security guardrails.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
agentwallet-sdkpackage from the official NPM registry. This download is central to the skill's functionality and follows security best practices by recommending a pinned version (6.0.0) to mitigate supply chain risks. - [COMMAND_EXECUTION]: The skill configures an MCP server to run the payment SDK via
npx. The implementation logic provided in the examples demonstrates secure execution patterns, such as validating credentials before starting the process and limiting the environment variables passed to the subprocess.
Audit Metadata