Freeland x402 eSIM

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 11:11 AM UTC
• Version: 1.0.1

Overview

This skill is a disclosed eSIM purchasing workflow with payment-related risk, but its behavior matches its stated purpose and includes reasonable safeguards.

Install this only if you want an agent to help buy Freeland travel eSIMs with Base USDC. Before signing any wallet challenge, verify the destination, plan, price, network, USDC asset, and recipient service, and keep delivery tokens, QR codes, and activation details private.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The skill description uses broad triggers like 'discover', 'compare', 'buy', and 'retrieve' that could cause the agent to invoke this capability for loosely related commerce or connectivity requests. Because the skill can lead to external API interaction and blockchain payment flow, overbroad routing increases the chance of unintended purchase-oriented actions in the wrong user context.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 8)May include surrounding context.

md

# Freeland x402 eSIM

Use the live service contract at `https://api.x402card.org/api/esim/discovery`. Use the remote MCP at `https://api.x402card.org/mcp` only for read-only discovery; never give it wallet authority.

## Discover and select

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 12)May include surrounding context.

md

# Freeland x402 eSIM

Use the live service contract at `https://api.x402card.org/api/esim/discovery`. Use the remote MCP at `https://api.x402card.org/mcp` only for read-only discovery; never give it wallet authority.

## Discover and select

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 50% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 25)May include surrounding context.

md

# Freeland x402 eSIM

Use the live service contract at `https://api.x402card.org/api/esim/discovery`. Use the remote MCP at `https://api.x402card.org/mcp` only for read-only discovery; never give it wallet authority.

## Discover and select

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 82% confidence

Finding

This instruction initiates a purchase flow against an external endpoint and can lead directly to a blockchain payment challenge. Even though the flow includes some validation steps, it creates a high-impact action path where an over-permissive or mis-invoked agent could trigger purchase preparation or payment execution against a third-party service.

Content

Scanner excerpt · SKILL.md (reported line 20)May include surrounding context.

md

## Buy directly

1. Generate one stable idempotency key for the purchase attempt.
2. Send `POST https://api.x402card.org/api/esim/purchase` with `{ "planId": "<live-plan-id>", "idempotencyKey": "<stable-key>" }` and no payment header.
3. Require HTTP `402` and decode `PAYMENT-REQUIRED`. Verify all of the following:
   - x402 version `2` and scheme `exact`;
   - network `eip155:8453`;

Static analysis

No suspicious patterns detected.