Skills
skills/mission69b/t2000/t2000-pay/Gen Agent Trust Hub

t2000-pay

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the @t2000/cli and @t2000/x402 packages from the public npm registry to function.
  • [COMMAND_EXECUTION]: The skill executes the t2000 pay command via the shell to interact with a local wallet and perform network requests to external URLs. This includes signing and broadcasting USDC transactions on the Sui blockchain.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it fetches data from external, potentially untrusted API endpoints and returns the raw response body to the agent's context.
  • Ingestion points: External API response bodies (SKILL.md flow step 5).
  • Boundary markers: No explicit boundary markers or isolation instructions are provided for the ingested data.
  • Capability inventory: The skill can execute shell commands and perform financial transactions via the t2000 CLI.
  • Sanitization: The skill does not mention any sanitization, validation, or filtering of the fetched API content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 02:54 AM