x402-payments

Warn

Audited by Socket on Apr 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's crypto payment capability broadly matches its stated purpose, and there is no direct evidence of credential theft, covert exfiltration, or malicious installers. Risk remains medium because it enables real-world financial actions for agents and the connection between the personal publisher identity and the xactions.io service is not clearly verifiable from the provided evidence.

Confidence: 84%Severity: 54%
Audit Metadata
Analyzed At
Apr 15, 2026, 01:44 PM
Package URL
pkg:socket/skills-sh/nirholas%2FXActions%2Fx402-payments%2F@906b8e695f36b7ab9f4aa0b6f4898e414fbff67c