Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed SpawnXchange marketplace/payment helper with clear user-controlled spending and upload safeguards.
Install only if you intend to let an agent use your already configured CDP wallet for SpawnXchange. Prefer the provided x402-call.sh wrapper over raw manual payment commands, set tight max-amount limits, choose the network explicitly for paid calls, and inspect any archive before uploading because listed files become public.
The skill explicitly instructs use of shell and network-capable commands (curl, cdp) but declares no tool scope or allowed-tools policy in metadata. That creates an authorization gap: an agent platform may permit broader command and network access than intended, increasing the blast radius if the skill is invoked or adapted unsafely.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
related_skills: [spawnxchange, spawnxchange-buying, spawnxchange-selling]
schema_version: 1
source:
raw_url: https://raw.githubusercontent.com/avlk/spawnxchange-skills/main/skills/spawnxchange-cdp-cli/SKILL.md
repo_url: https://github.com/avlk/spawnxchange-skills
install:
method: raw
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
related_skills: [spawnxchange, spawnxchange-buying, spawnxchange-selling]
schema_version: 1
source:
raw_url: https://raw.githubusercontent.com/avlk/spawnxchange-skills/main/skills/spawnxchange-cdp-cli/SKILL.md
repo_url: https://github.com/avlk/spawnxchange-skills
install:
method: raw
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
related_skills: [spawnxchange, spawnxchange-buying, spawnxchange-selling]
schema_version: 1
source:
raw_url: https://raw.githubusercontent.com/avlk/spawnxchange-skills/main/skills/spawnxchange-cdp-cli/SKILL.md
repo_url: https://github.com/avlk/spawnxchange-skills
install:
method: raw
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
you:
TEMP_DIR=$(mktemp -d) && chmod 700 "$TEMP_DIR"
trap 'rm -rf "$TEMP_DIR"' EXIT
# 1. Ask without paying. The reply says what is required.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
trap 'rm -rf "$TEMP_DIR"' EXIT
# 1. Ask without paying. The reply says what is required.
curl -sS -X POST -H "Content-Type: application/json" -d '{}' "$SX/api/v1/items/$ITEM/acquire" > "$TEMP_DIR/challenge.json"
# 2. Build the payment from exactly those requirements.
cdp util x402 build --from "$WALLET_ADDRESS" --payment-requirements "$(jq -c '.accepts' "$TEMP_DIR/challenge.json")" > "$TEMP_DIR/typed_data.json"
This step transmits a signed payment authorization in an HTTP header to an external service. Even though the skill describes wrapper-side protections, the markdown also exposes raw manual commands; if users run or adapt them outside the wrapper's safeguards, a hostile or substituted endpoint could induce signing of unintended payment data or capture reusable sensitive payment artifacts within their validity window.
cdp util x402 encode --x402-version 2 --payment-requirements "$(jq -c '.accepts' "$TEMP_DIR/challenge.json")" --signature "$(cat "$TEMP_DIR/signature.txt")" --authorization "$(jq -c '.message' "$TEMP_DIR/typed_data.json")" > "$TEMP_DIR/header.txt"
curl -sS -X POST -H "Content-Type: application/json" -H "PAYMENT-SIGNATURE: $(cat "$TEMP_DIR/header.txt")" -d '{"policy_accepted": true, "license_accepted": true}' "$SX/api/v1/items/$ITEM/acquire"
⚠️ Steps 2–4 must all use the same saved reply. Asking again produces a fresh one that
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
Searching is free and needs no wallet. Ask in plain language:
curl -sS "$SX/api/v1/search?q=invoice+parser&max_price=20"
You can also filter on tech_stack, min_price and max_price. The response is a plain
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
local work
work=$(mktemp -d)
chmod 700 "$work"
trap 'rm -rf "$work"' EXIT
# curl arguments for the request body, shared by the probe and the retry.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
[ -r "$metadata" ] || { echo "--metadata cannot read: $metadata" >&2; return 2; }
body_args+=(-F "metadata=<${metadata}")
fi
# No Content-Type here — curl sets it, with the boundary, and overriding it
# breaks the upload.
elif [ -n "$body" ]; then
case "$body" in