x402-payment
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices for handling sensitive cryptocurrency data. It utilizes the
agent-walletsystem to interact with wallets via environment variables, ensuring that private keys and mnemonic phrases are never exposed in command-line arguments or logs. The instructions explicitly forbid the agent from leaking these secrets. - [DATA_EXFILTRATION]: Analysis of the network activity reveals communications with standard blockchain RPC providers (such as TronGrid and nodes operated by the author) and the vendor's own GasFree API. No unauthorized or suspicious data transmission patterns were detected.
- [COMMAND_EXECUTION]: The skill executes local TypeScript files using
npx tsx, which is a standard deployment method for this platform. File system operations are restricted to reading local configuration files and writing binary data to temporary directories for valid processing of endpoint responses. - [EXTERNAL_DOWNLOADS]: All external dependencies are sourced from the official NPM registry. The primary packages are either well-known industry standards (like
tronweb) or internal components from the verified vendor 'BofAI'.
Audit Metadata