pay-with-app
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands including
curlfor API requests,jqfor JSON processing, andcast(Foundry) for blockchain RPC interactions. It also executes dynamic Node.js scripts to generate cryptographic signatures. - [EXTERNAL_DOWNLOADS]: The skill downloads the
viemlibrary from the npm registry if it is not already present in the user's environment. This is handled with a specific security protocol that requires user consent viaAskUserQuestionbefore installation. - [PROMPT_INJECTION]: The skill is designed to process external, untrusted data from HTTP 402 response bodies. It mitigates indirect prompt injection risks by enforcing strict validation rules, such as regex checks for addresses and amounts, and a blocklist for shell metacharacters in free-text fields.
- [CREDENTIALS_UNSAFE]: The skill relies on sensitive environment variables (
PRIVATE_KEYandUNISWAP_API_KEY). It includes explicit instructions to the agent to never hardcode or commit these secrets.
Audit Metadata