The Agent Skills Directory

[COMMAND_EXECUTION]: The skill manages the lifecycle of its gateway component using subprocess.Popen in scripts/monetize.py, scripts/keepalive.sh, and scripts/verify_setup.py. This is an expected operational behavior for a monetization wrapper.\n- [EXTERNAL_DOWNLOADS]: Installation scripts (setup.sh, scripts/ensure_env.sh) fetch necessary dependencies from the official Python Package Index (PyPI).\n- [REMOTE_CODE_EXECUTION]: The scripts/keepalive.sh watchdog monitors a local health endpoint (127.0.0.1) and restarts the gateway script if it is unresponsive, which was flagged by automated scanners as a potential execution pattern.\n- [PROMPT_INJECTION]: The discovery logic in bazaar.py retrieves service descriptions from external APIs. These descriptions are truncated to 200 characters but not fully sanitized, presenting a surface for Indirect Prompt Injection where malicious content in a service listing could attempt to influence agent behavior.\n- [DATA_EXFILTRATION]: The buyer client (client.py) performs network requests to various blockchain RPC nodes and vendor-owned facilitator endpoints to process payments and verify balances. These operations are within the stated scope of the skill's purpose.

x402