pr402-buyer

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires calling the facilitator host at runtime (e.g. https://ipay.sh), including fetching https://ipay.sh/agent-tools.json and querying https://ipay.sh/api/v1/facilitator/health, which are runtime-fetched manifests/endpoints that can change available agent tools and thus directly control agent behavior or cause execution via the MCP tooling the skill suggests.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a buyer integration for on-chain payments (pr402/x402). It documents specific payment APIs and flows to build and submit payment transactions (POST /api/v1/facilitator/build-exact-payment-tx), instructions to sign VersionedTransaction payloads, the use of PAYMENT-SIGNATURE headers to retry gated resources, and direct facilitator endpoints for verify/settle. It also covers subscription purchase endpoints (POST /subscribe), payer keypair handling, and funding payer wallets — all of which are explicit, purpose-built financial execution operations (on-chain settlement / escrow). This is not a generic tool; it is designed to move funds.