x402-payments

Warn

Audited by Socket on Apr 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's crypto payment capability broadly matches its stated purpose, and there is no direct evidence of credential theft, covert exfiltration, or malicious installers. Risk remains medium because it enables real-world financial actions for agents and the connection between the personal publisher identity and the xactions.io service is not clearly verifiable from the provided evidence.

Confidence: 84%Severity: 54%
Audit Metadata
Analyzed At
Apr 15, 2026, 01:44 PM
Package URL
pkg:socket/skills-sh/nirholas%2FXActions%2Fx402-payments%2F@906b8e695f36b7ab9f4aa0b6f4898e414fbff67c
Security Audit — socket — x402-payments