skills/bofai/skills/x402-payment/Gen Agent Trust Hub

x402-payment

Pass

Audited by Gen Agent Trust Hub on Apr 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows security best practices for handling sensitive cryptocurrency data. It utilizes the agent-wallet system to interact with wallets via environment variables, ensuring that private keys and mnemonic phrases are never exposed in command-line arguments or logs. The instructions explicitly forbid the agent from leaking these secrets.
  • [DATA_EXFILTRATION]: Analysis of the network activity reveals communications with standard blockchain RPC providers (such as TronGrid and nodes operated by the author) and the vendor's own GasFree API. No unauthorized or suspicious data transmission patterns were detected.
  • [COMMAND_EXECUTION]: The skill executes local TypeScript files using npx tsx, which is a standard deployment method for this platform. File system operations are restricted to reading local configuration files and writing binary data to temporary directories for valid processing of endpoint responses.
  • [EXTERNAL_DOWNLOADS]: All external dependencies are sourced from the official NPM registry. The primary packages are either well-known industry standards (like tronweb) or internal components from the verified vendor 'BofAI'.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 22, 2026, 10:23 AM