The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill uses environment variables (PRIVATE_KEY, AGENT_PRIVATE_KEY) for secret management, which is a recommended security practice. It includes placeholders for these keys in documentation and code examples.
[EXTERNAL_DOWNLOADS]: The skill documentation guides users to install necessary dependencies from official registries (npm and PyPI). These include @x402 suite, viem, and express, which are standard for the described protocol.
[DATA_EXFILTRATION]: The skill interacts with the Coinbase Developer Platform (CDP) facilitator at https://api.cdp.coinbase.com/platform/v2/x402 to verify and settle payments. This is a well-known service and part of the protocol's intended functionality.
[COMMAND_EXECUTION]: Instructions include standard package installation commands (pip install, npm install). No suspicious or arbitrary command execution patterns were found.
[PROMPT_INJECTION]: The skill has a surface for indirect prompt injection. Ingestion points: Payment requirements (JSON) are read from external servers via fetch and requests (e.g., examples/agent-client/README.md). Boundary markers: None explicitly shown. Capability inventory: Cryptographic signing of EIP-712 authorizations (ExactEvmScheme). Sanitization: Implicitly handled by EIP-712 schema validation in protocol libraries.

x402