agentic-payments
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions and code for setting up HTTP servers that process requests from external AI agents, creating an inherent surface for indirect prompt injection.
- Ingestion points: The payment server implementation (e.g., in
mpp.mdandx402.md) creates Express routes that receive input from untrusted network clients. - Boundary markers: The technical snippets focus on payment verification and do not explicitly define delimiters or instruction-ignoring wrappers for data processed at the application level.
- Capability inventory: The skill possesses network capabilities (e.g.,
mppx.fetch, Horizon SDK for ledger submission) and local filesystem access used during the initial environment configuration. - Sanitization: While the underlying payment libraries validate protocol credentials, the skill does not detail application-level sanitization for the specific content delivered by the API after payment is confirmed.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the acquisition of resources from well-known and trusted infrastructure within the Stellar ecosystem.
- Fetches testnet funds from the official Stellar Friendbot service (
friendbot.stellar.org). - Guides users to obtain testnet USDC from the Circle faucet service.
- Recommends the installation of verified libraries from the NPM registry, including official
@stellarpackages and OpenZeppelin-facilitated payment tools.
Audit Metadata