The Agent Skills Directory

[SAFE]: The skill documents a legitimate payment protocol (x402) for the Hedera network. All referenced resources, including the '@x402' npm organization and the 'docs.x402.org' domain, are consistent with the vendor's ('hedera-dev') stated purpose of providing Hedera development tools.
[SAFE]: The skill explicitly emphasizes security best practices, such as ensuring the resource server does not hold the facilitator's private keys and recommending the use of environment variables for sensitive configuration.
[DATA_EXPOSURE]: The skill mentions the use of FACILITATOR_PRIVATE_KEY in references/facilitator.md. However, this is documented as a required environment variable for a self-hosted facilitator component, which is standard practice for secret management and does not constitute unsafe hardcoding of credentials.
[COMMAND_EXECUTION]: No shell command execution or dynamic code injection patterns were found in the provided files.
[PROMPT_INJECTION]: No attempts to override agent behavior or bypass safety filters were detected.

x402-payments