agent-payment-x402
Warn
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the 'agentwallet-sdk' package from the npm registry during installation and execution phases.
- [REMOTE_CODE_EXECUTION]: The skill uses 'npx' to execute external code from the 'agentwallet-sdk' package at runtime. This execution model relies on the security and integrity of the remote package and the npm ecosystem.
- [COMMAND_EXECUTION]: The skill provides instructions for the agent and orchestrator to execute shell commands, including 'npx' and 'npm install -g', which are necessary to start the payment server and initialize the environment.
- [PROMPT_INJECTION]: The skill handles data from external servers via the x402 protocol (HTTP 402 negotiation), creating a surface for indirect prompt injection if malicious servers return crafted responses.
- Ingestion points: External server responses during the payment negotiation flow in the x402 protocol.
- Boundary markers: No explicit prompt delimiters are described to isolate protocol data from agent instructions.
- Capability inventory: The skill has the ability to check wallet balances, list transactions, and execute payments, which could be abused if the agent is influenced by untrusted server data.
- Sanitization: The provided orchestration examples include basic numeric validation and JSON parsing checks, but do not fully mitigate the risk of instructions embedded in protocol data.
Audit Metadata