x402-erc7710

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill explicitly describes generating/exporting an agent JSON package that contains the agent private key and asks whether to include the private key in exported JSON, which would require the model to produce secret values verbatim in its output.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly implements payment rails and delegated wallet permissions: it describes x402 payment flows (HTTP 402, signed payment payloads), ERC-7710/7715 delegation and wallet permission requests, agent redemption of delegations to produce payment authorizations, concrete spend policies/budgets, demo spend caps (USDC amounts), and steps to generate/import agent wallets and run x402 payment attempts. These are specific financial execution capabilities (sending token payments, redeeming delegated spend, managing budgets), not generic tooling.