OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
The skill enables autonomous payment authorization and cryptographic signing. While functional for its intended purpose, it requires the AI agent to handle raw Ed25519 private keys within tool parameters, which creates a risk of credential exposure if the agent's context is compromised. Additionally, it lacks sanitization and boundary markers for external data processed during transaction authorization, presenting a surface for indirect prompt injection.
Detected behaviors
No alerts
No issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed