x402
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill correctly references and utilizes resources from established technology providers.
- Fetches official packages from standard registries, including NPM (@x402/*) and PyPI (x402).
- References the official Coinbase Developer Platform (CDP) API for payment verification and settlement.
- Links to official documentation and repositories from well-known services such as Cloudflare and Coinbase.
- [CREDENTIALS_UNSAFE]: The documentation follows industry best practices for secret management by instructing users to load sensitive keys (e.g., PRIVATE_KEY) from environment variables rather than hardcoding them within the skill.
- [SAFE]: The protocol implementation described includes robust security mechanisms such as EIP-712 structured data signing for authorizations and the use of cryptographically secure random nonces to prevent replay attacks.
Audit Metadata