agentic-gateway

SUSPICIOUS: the skill is purpose-aligned and not confirmed malware, but it carries meaningful security risk because it handles wallet private keys, forwards signing authority into third-party packages, and enables autonomous paid blockchain actions. Data flows mostly stay with official Alchemy/Stripe endpoints, so the main concern is proportionality and financial/action risk rather than covert exfiltration.

No evidence of intentional malware, data theft, backdoors, or obfuscated malicious behavior is present. The examples implement payment functionality as described. The /api/create-spt endpoint is insecure if exposed without authentication, authorization, strict input validation, amount/currency limits, and rate limiting because it uses a server-side Stripe secret to process client-controlled payment requests. The private-key example must remain strictly server-side and never be bundled into client code.

The fragment is gateway integration documentation, not malware or executable code. It presents significant operational and supply-chain concerns because it handles private keys, controls wallet payments, recommends unpinned `npx` execution, and supports automatic payment retries. No direct malicious behavior is demonstrated in the supplied text; inspect the exact package version, dependencies, signatures, and key-storage implementation before use.