mppx
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates secure configuration practices by advising the use of environment variables (
process.env.MPP_SECRET_KEY) for server-side secrets and providing explicit warnings against committing private keys or wallet seeds to version control. - [EXTERNAL_DOWNLOADS]: The external references, including the source code repository and documentation, point to official resources for the mppx SDK and the established wevm (Wagmi/Viem) organization.
- [INDIRECT_PROMPT_INJECTION]: The skill handles HTTP 402 payment challenges from external servers. This data ingestion is conducted through structured protocol primitives within the SDK, providing a safe alternative to direct interpolation of untrusted data into agent contexts.
Audit Metadata