agent-payment-x402

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill starts an MCP server by running "npx agentwallet-sdk@6.0.0" (runtime fetch-and-execute of an npm package) which executes remote code and is required for the payment tool — see the package page https://www.npmjs.com/package/agentwallet-sdk.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly provides payment primitives and wallet management for agents: it documents an x402 payment protocol that "negotiates price, checks budget, signs a transaction, and retries", exposes an agent-callable send_payment tool, and references a packaged SDK (agentwallet-sdk) that manages private keys and ERC-4337 smart accounts. Those elements are specifically designed to move value (sign and send payments, check balances, list transactions). Even though spending policies are meant to be set by the orchestrator, the presence of agent-callable send_payment and non-custodial key management constitutes direct financial execution capability.