agent-payment-x402
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the agentwallet-sdk package from the NPM registry to function. Downloads from this official registry are treated as safe for the skill's intended purpose.
- [COMMAND_EXECUTION]: The provided configuration and examples use npx to execute the agentwallet-sdk package as an MCP server. This is the intended operation of the skill and is configured with security best practices such as version pinning.
- [SAFE]: The skill incorporates several security best practices, including version pinning for dependencies (@6.0.0), explicit secret whitelisting (WALLET_PRIVATE_KEY) when spawning subprocesses, and fail-closed logic for budget enforcement.
Audit Metadata