x402-express-wrapper
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
x402-expressandetherspackages via NPM.x402-expressis a specific monetization library provided by the skill author (sickn33) used to implement blockchain paywalls. - [INDIRECT_PROMPT_INJECTION]: The implementation processes a
Payment-SignatureHTTP header containing a Base64-encoded JSON payload. This header is an ingestion point for untrusted data that could be used for indirect prompt injection attacks. - Ingestion Point:
Payment-Signatureheader in Express middleware (SKILL.md). - Boundary Markers: None are defined to separate the untrusted header content from the agent or server's execution context.
- Capability Inventory: The middleware performs network operations (RPC calls to Base L2) and cryptographic verification.
- Sanitization: The provided instructions do not include specific sanitization or validation steps for the decoded JSON payload before it is used within the application logic.
Audit Metadata