venice-x402
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process data from external Venice AI API responses, including structured JSON in the response body and base64-encoded content in the
PAYMENT-REQUIREDheader. This ingestion of external data represents a surface for indirect prompt injection. - Ingestion points: 402 status code response bodies and
PAYMENT-REQUIREDheaders returned fromapi.venice.ai. - Boundary markers: None explicitly defined in the processing instructions.
- Capability inventory: Network operations via
curlandfetch, and package installation vianpm. - Sanitization: The instructions do not include specific sanitization or validation steps for the data retrieved from the API.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
x402package to handle payment signature generation. - Dependency:
npm install x402. - Context: This is a vendor-owned library from
veniceaiused for EIP-712 signing of USDC transfers.
Audit Metadata