x402-express-wrapper
Warn
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of
x402-express, a non-standard community package from the M2MCent project, which is responsible for critical financial and cryptographic functions. - [COMMAND_EXECUTION]: The integration process involves executing shell commands to install dependencies, specifically
npm install x402-express ethers. - [PROMPT_INJECTION]: The application structure creates an attack surface for indirect prompt injection by processing external data from HTTP headers.
- Ingestion points: Untrusted data enters the server via the
Payment-Signatureheader as specified in the architectural considerations (SKILL.md). - Boundary markers: There are no instructions or delimiters provided to prevent the server from interpreting instructions potentially hidden within the Base64-encoded payload.
- Capability inventory: The server environment holds the
RELAYER_PRIVATE_KEYand can perform blockchain settlement transactions (SKILL.md). - Sanitization: There is no documentation regarding the sanitization or validation of the header content before processing.
Audit Metadata