pr402-seller

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone several repositories from the vendor's GitHub organizations (miraland-labs and miralandlabs), including x402-seller-starter, x402-subscription-starter, and the x402 hub repository containing the CLI tools.
  • [COMMAND_EXECUTION]: Provides instructions for running standard development commands such as npm install, npm run build, cargo run, and executing local Node.js scripts (node dist/index.js, node tools/enroll.mjs) to manage the integration lifecycle.
  • [SAFE_PRACTICES]: Includes explicit warnings against committing private keys or secrets to version control and recommends using environment variables for sensitive configuration like MERCHANT_WALLET and SUBSCRIPTION_AUTH_MERCHANT_SECRET_KEY.
  • [NETWORK_OPERATIONS]: Documents interaction with the facilitator's API endpoints at https://ipay.sh and https://agent.pay402.me for tasks such as health checks, on-chain provisioning, and payment verification/settlement, which are the primary functions of the described service.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 06:22 AM
Security Audit — agent-trust-hub — pr402-seller