agentic-gateway

Fail

Audited by Runlayer on Mar 11, 2026

Risk Level: HIGH
Scan Summary
Max Score
94%
Files
15
Flagged
13
Chunks
20
Flagged Files (13)
agentic-gateway/SKILL.mdHIGH
93.8%

Shadow Persistence

Privilege Escalation

Guardrail Bypass

Context Poisoning

agentic-gateway/rules/payment.mdHIGH
91.6%

Malicious tool definition detected

agentic-gateway/rules/curl-workflow.mdHIGH
91.4%

Malicious tool definition detected

## Step 1: Generate a SIWE Token ```bash npx @alchemy/x402 sign-siwe --private-key ./wallet-key.txt > siwe-token.txt ``` For subsequent requests, read from the cached file: ```bash TOKEN=$(cat siwe-token.txt) ``` > **Important:** SIWE tokens expire after 1 hour by default. Use `--expires-after` to customize (e.g.

agentic-gateway/rules/authentication.mdMEDIUM
85.9%

Malicious tool definition detected

agentic-gateway/references/node-json-rpc.mdMEDIUM
85.1%

Malicious tool definition detected

agentic-gateway/references/data-simulation-api.mdMEDIUM
81.3%

Malicious tool definition detected

Tool: agentic-gateway/references/data-simulation-api.md [2/2] Description: "Authorization: SIWE $TOKEN" \ -d '{ "jsonrpc": "2.0", "id": 1, "method": "alchemy_simulateExecutionBundle", "params": [ [ { "from": "0xd8dA...", "to": "0xA0b8...", "data": "0x095ea7b3..." }, { "from": "0xd8dA...", "to": "0xdef1...", "data": "0xd9627aa4..." } ], "latest" ] }' ``` ### Response Returns an array of results, one per transaction.

agentic-gateway/rules/wallet-bootstrap.mdMEDIUM
77.8%

Malicious tool definition detected

agentic-gateway/rules/overview.mdMEDIUM
75.3%

Malicious tool definition detected

agentic-gateway/references/data-portfolio-apis.mdMEDIUM
75.2%

Malicious tool definition detected

agentic-gateway/rules/making-requests.mdLOW
64.0%

Tool passed security scan

agentic-gateway/references/data-token-api.mdLOW
63.1%

Tool passed security scan

agentic-gateway/references/data-nft-api.mdLOW
59.4%

Tool passed security scan

agentic-gateway/rules/reference.mdLOW
50.1%

Tool passed security scan

Passed Files (2)Click to expand
agentic-gateway/references/data-transfers-api.mdOK
50.0%

Tool passed security scan

agentic-gateway/references/data-prices-api.mdOK
36.8%

Tool passed security scan

Audit Metadata
Max File Score
94%
Classification
KNOWN_SERVER_PARTIAL_KNOWN
Files Scanned
15
Files Flagged
13
Chunks Analyzed
20
Analyzed
Mar 11, 2026, 01:09 PM
Security Audit — runlayer — agentic-gateway