Security audit

Cross Exchange Spread

Security checks for vulnerabilities and agentic risk

Overview

This skill is a paid market-data lookup, but it asks the agent to use a raw wallet private key for automatic paid requests without documented spending limits or confirmation controls.

Install only with a dedicated low-balance wallet, not a primary wallet. Set explicit external spend controls where possible, monitor call volume, and verify the x402 package, payment recipient, chain, token, and amount before allowing an agent to invoke this automatically.

A.I.G

Vulnerability Patterns

Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T05 · Unauthorized Access and Privilege Escalation

Error

Location: SKILL.md:6
Finding: Raw Wallet Private Key Grants Excessive Authority for Automatic Paid Requests
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: SKILL.md:32
Finding: Unpinned Third-Party Payment Dependency Receives Wallet Signing Material
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Context-Inappropriate Capability

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill requires access to an EVM private key even though its advertised function is only to read pricing/spread data. Because the x402 client uses that key to authorize on-chain payments, exposing a signing key to a third-party signal endpoint expands the trust boundary and can lead to unintended spending or, in the worst case, key misuse if the integration or surrounding tooling is compromised.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The documentation says payment authorization is handled automatically and emphasizes 'No API key, no account' but does not prominently warn that each call will spend funds from the user's wallet. This can mislead operators into treating the endpoint like a normal free GET request, causing unexpected charges or automated fund depletion when invoked repeatedly by an agent.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.