registry / @aifinpay/agent / 1.1.0
@aifinpay/agent@1.1.0
Unified agent-economy SDK for autonomous AI agents — chain-opaque AiFinPayAgent surface (call/openSession/balance/verify) over Polygon and Solana execution environments.
AI Security Review
scanned 4mo ago · by lpm-firewall-aiSource inspection shows package-aligned network/payment behavior and an explicit CLI initializer, with no lifecycle hook abuse or unconsented AI-agent control-surface mutation. The MCP-related code only prints a command after detecting local host markers, so it does not establish a hijack or persistence chain.
Static reason
No blocking static signals were detected.
Trigger
User imports SDK methods or runs aifinpay init
Impact
Creates project .env/.gitignore on explicit CLI init; runtime methods may sign payment transactions when called by the application.
Mechanism
Local wallet setup and payment/RPC API client
AI rationale
Source inspection shows package-aligned network/payment behavior and an explicit CLI initializer, with no lifecycle hook abuse or unconsented AI-agent control-surface mutation. The MCP-related code only prints a command after detecting local host markers, so it does not establish a hijack or persistence chain.
Evidence
package.jsondist/cli.jsdist/index.jsdist/agent.jsdist/unifiedAgent.jsdist/crossChain.jsdist/facilitators/aifinpay.jsdist/facilitators/standard-x402.js.env.gitignore
Network endpoints5
api.aifinpay.ioaifinpay.iopolygon.drpc.orgapi.mainnet-beta.solana.comli.quest/v1
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has only prepublishOnly build script; no install/preinstall/postinstall execution.
- dist/cli.js is bin-only and user-invoked; init writes local .env AGENT_PK and .gitignore, with optional --merchant API POST.
- dist/cli.js detects Claude/Cursor only to print an MCP add command; it does not mutate agent configs.
- dist/agent.js and dist/unifiedAgent.js network calls are SDK payment/registry/RPC operations triggered by caller methods.
- No child_process, eval, broad filesystem harvesting, native binary loading, or import-time side effects found.
- Telemetry in dist/unifiedAgent.js is opt-out metadata to package base URL, not file/env exfiltration.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
0 flaggedNo flagged code excerpts are attached to this scan.
Findings
2 Medium5 Low
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @aifinpay/agent@1.1.0.
See all versions of @aifinpay/agent for other recorded verdicts.
- Review the evidence and your use of @aifinpay/agent@1.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.