Security audit
Sentinel Transaction Safety
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed paid transaction-checking integration that sends unsigned transaction details to a remote service before an agent signs a Base transaction.
Before installing, confirm you are comfortable sending unsigned transaction payloads and potentially sensitive calldata to sentinel-agent.dev, and set spending controls for any autonomous wallet that may sign x402 USDC authorizations. Do not use it for air-gapped workflows or transactions whose calldata must remain local.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.