Security audit
Security checks across malware telemetry and agentic risk
The skill matches its stated payment and wallet-management purpose, but it can spend funds, sign blockchain transactions, mutate owner resources, and revoke messaging installations with limited runtime guardrails.
Install only if you are comfortable with an agent that can spend USDC, sign on-chain transactions, manage x402 resources, and use wallet/API credentials. Use a dedicated low-balance wallet, scoped API keys or PATs, trusted default hosts, and review every payment, staking, deletion, registration, feedback, and XMTP revoke action before running it.
filename = "downloaded_product"
print(f"\nDownloading file to: {filename}")
file_response = requests.get(result["downloadUrl"])
if file_response.status_code == 200:
with open(filename, "wb") as f:
f.write(file_response.content)def _post(path: str, body: dict) -> dict:
r = requests.post(f"{BASE}{path}", json=body, timeout=TIMEOUT)
data = r.json()
if not r.ok:
msg = data.get("error", data)else:
body["agentId"] = agent_id
response = requests.post(
url,
json=body,
headers={if response.status_code in (200, 201):
result = response.json()
print("\nEndpoint created")
print(f"URL: https://api.x402layer.cc/e/{slug}")
if "endpoint" in result and "api_key" in result["endpoint"]:
print("API Key returned. You must validate x-api-key at your origin.")
if "webhook" in result:def _post(path: str, body: dict) -> dict:
r = requests.post(f"{BASE}{path}", json=body, timeout=TIMEOUT)
data = r.json()
if not r.ok:
msg = data.get("error", data)# Install: pip install -r requirements.txt # EVM/Base payments - Required for EIP-712 signing eth-account>=0.10.0 web3>=6.0.0 # HTTP requests
# EVM/Base payments - Required for EIP-712 signing eth-account>=0.10.0 web3>=6.0.0 # HTTP requests requests>=2.28.0
web3>=6.0.0 # HTTP requests requests>=2.28.0 # Receipt JWT verification (RS256/JWKS) pyjwt[crypto]>=2.8.0
# Receipt JWT verification (RS256/JWKS) pyjwt[crypto]>=2.8.0 cryptography>=42.0.0 # Solana payments / wallet-first Solana agent registration solders>=0.20.0
VirusTotal engine telemetry is currently stale for this artifact.
Detected: suspicious.env_credential_access