explain-algorand-x402-python

Warn

Audited by Snyk on Feb 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

  • Direct money access detected (high risk: 1.00). The skill is explicitly a Python SDK for Algorand payment protocol integration (x402-avm) and includes concrete signer interfaces and methods for creating, signing, sending, and confirming blockchain transactions. It references private keys (AVM_PRIVATE_KEY), Protocols like ClientAvmSigner and FacilitatorAvmSigner with methods such as sign_transactions, sign_transaction, sign_group, send_group, and confirm_transaction, and shows how to register a signer with a client and handle algosdk encoding. These are specific crypto/blockchain transaction operations (signing and submitting payments), not generic tooling.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 16, 2026, 12:36 PM