agent-payment-x402
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
npx agentwallet-sdk@6.0.0to launch a Model Context Protocol (MCP) payment server. The instructions emphasize pinning the version to mitigate supply-chain risks. - [CREDENTIALS_UNSAFE]: The skill manages sensitive wallet access via the
WALLET_PRIVATE_KEYenvironment variable. It includes explicit code for validating the presence of the key and whitelisting environment variables when spawning subprocesses to prevent credential leakage. - [EXTERNAL_DOWNLOADS]: Fetches seller guidelines and SDK documentation from official OKX repositories on GitHub (
github.com/okx/payments) to support X Layer integrations. These references target well-known service infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data during the x402 payment negotiation flow (HTTP 402 responses). It addresses this attack surface by mandating that spending policies and budget limits be enforced by the orchestrator layer rather than the agent itself, preventing unauthorized limit escalations.
Audit Metadata