pay-with-any-token
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell-based tools including curl, jq, and the Foundry cast CLI to manage blockchain interactions. Specifically, cast send is used to broadcast transactions. Security is maintained through explicit instructions to the agent to always seek user confirmation via AskUserQuestion before any signing or broadcasting operations.
- [EXTERNAL_DOWNLOADS]: The skill requires the external installation of the mppx and viem Node.js packages to facilitate credential building and network communication. These are standard, reputable libraries in the web3 development community.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it processes untrusted data from external HTTP 402 response bodies. It effectively mitigates this risk by: 1) Ingesting data specifically via jq filters from the CHALLENGE_BODY. 2) Implementing strict sanitization that rejects shell metacharacters (e.g., ;, |, &). 3) Maintaining a mandatory human-in-the-loop confirmation gate for all sensitive capabilities, preventing automated exploitation of the transaction broadcasting inventory.
Audit Metadata