Agent Payments

• Analyzed: May 11, 2026, 7:33 AM
• Findings: 1
• Version: 1.0.0
• Hash: 7fbc0d3f9439a3029a05b51ad4c9de8e90fca899eaa8dcda27faffea1406cbb2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a functional payment routing interface for Stripe, Coinbase Commerce, and the Spraay protocol, but contains high-risk patterns in 'scripts/pay.sh'. Specifically, the 'spraay_batch' and 'spraay_bitcoin_batch' functions use 'cat' to read arbitrary local files provided via the '--file' argument and transmit their contents to a third-party gateway (gateway.spraay.app) without any validation or sanitization. This creates a significant primitive for data exfiltration (e.g., reading SSH keys or cloud credentials) if the agent is manipulated via prompt injection. Additionally, the skill handles highly sensitive API keys and provides broad instructions in 'SKILL.md' to trigger on various financial and administrative tasks, increasing the potential impact of misuse.