x402-payments

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill is purpose-aligned and does not show obvious malware, credential theft, or untrusted installer behavior, but it enables autonomous crypto payments with real-world financial impact and lacks explicit approval/spending guardrails. Main concern is autonomy and transaction risk, not supply-chain abuse.

Confidence: 87%Severity: 72%
Audit Metadata
Analyzed At
Sep 22, 2026, 08:37 AM
Package URL
pkg:socket/skills-sh/nirholas%2Fxactions%2Fx402-payments%2F@72d08d392ce428745cb9f98fb978397b5cc979f8739ca0cf572313f38ae090cd