skills/veniceai/skills/venice-x402/Gen Agent Trust Hub

venice-x402

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process data from external Venice AI API responses, including structured JSON in the response body and base64-encoded content in the PAYMENT-REQUIRED header. This ingestion of external data represents a surface for indirect prompt injection.
  • Ingestion points: 402 status code response bodies and PAYMENT-REQUIRED headers returned from api.venice.ai.
  • Boundary markers: None explicitly defined in the processing instructions.
  • Capability inventory: Network operations via curl and fetch, and package installation via npm.
  • Sanitization: The instructions do not include specific sanitization or validation steps for the data retrieved from the API.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the x402 package to handle payment signature generation.
  • Dependency: npm install x402.
  • Context: This is a vendor-owned library from veniceai used for EIP-712 signing of USDC transfers.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 09:34 PM
Security Audit — agent-trust-hub — venice-x402