cmc-x402
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the official x402 TypeScript SDK packages (@x402/axios, @x402/evm) and the standard viem library to facilitate market data requests and on-chain payments.- [CREDENTIALS_UNSAFE]: The code samples demonstrate the use of environment variables for blockchain private keys (process.env.PRIVATE_KEY). This is a standard practice for this use case, and the skill includes explicit warnings against hardcoding secrets.- [COMMAND_EXECUTION]: The documentation provides standard shell commands for setting up the development environment via npm install.
Audit Metadata