registry / @aifinpay/agent / 2.11.1
@aifinpay/agent@2.11.1
AiFinPay SDK for global Agent Passport identity and route-verified AIFP-1/AIFP-2 settlement for autonomous AI agents.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged wallet transfer behavior belongs to the package’s payment SDK and requires an explicit caller invocation. The manifest has no install hook, and the inspected entrypoint only exports the bridge API rather than running it automatically.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A caller explicitly requests a bridge quote and calls bridgeExecute with it.
Impact
An explicitly requested bridge can move the quoted funds; no automatic transfer or unrelated collection was identified.
Mechanism
The SDK obtains a quote from LiFi, checks transaction properties, and submits the source-chain transaction through the caller’s wallet client.
AI rationale
The flagged wallet transfer behavior belongs to the package’s payment SDK and requires an explicit caller invocation. The manifest has no install hook, and the inspected entrypoint only exports the bridge API rather than running it automatically.
Network endpoints1
li.quest/v1
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle script is prepublishOnly, which runs the build; no install hook is declared.
- The package exports bridge operations as public APIs; the entrypoint does not invoke them automatically.
- Bridge execution is an explicit method that submits a transaction from a previously fetched quote.
- Before signing, bridge execution checks the source chain and rejects unquoted native value or excessive gas.
- The bridge quote uses the agent’s address by default, with an optional caller-supplied destination.
Evidence against
- The package is a payment SDK, so wallet signing and cross-chain transfers match its stated purpose.
- Bridge operations contact LiFi at https://li.quest/v1, the documented bridge quote and status service.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggeddist/unifiedAgent.jsView file
16import { createPublicClient, createWalletClient, http, keccak256, toHex, toFunctionSelector, formatEther, } from "viem";
L17: import { privateKeyToAccount } from "viem/accounts";
L18: import { viemWalletClientWallet } from "./agentWallet.js";
...
L173: const TRANSPORT_OVERRIDE = {
L174: polygon: { defaultRpc: "https://polygon.drpc.org" },
L175: botchain: { defaultRpc: "https://rpc.botchain.ai", explorer: "https://scan.botchain.ai" },
...
L328: // Ordering it the other way — as 1.3.2 shipped — makes the default base fetch
L329: // the SPA shell and die inside JSON.parse.
L330: const DEFAULT_REGISTRY_PATHS = ["/api/providers", "/providers"];
...
L376: this.polygonRpc = opts.polygonRpc ?? opts.evmRpcUrls?.polygon ?? "https://polygon.drpc.org";
L377: this.solanaRpc = opts.solanaRpc ?? pro
Critical
Wallet Drain
Source uses private key material to transfer cryptocurrency funds.
dist/unifiedAgent.jsView on unpkg · L1616Trigger-reachable chain: manifest.main -> dist/index.js -> dist/unifiedAgent.js
L16: import { createPublicClient, createWalletClient, http, keccak256, toHex, toFunctionSelector, formatEther, } from "viem";
L17: import { privateKeyToAccount } from "viem/accounts";
L18: import { viemWalletClientWallet } from "./agentWallet.js";
...
L173: const TRANSPORT_OVERRIDE = {
L174: polygon: { defaultRpc: "https://polygon.drpc.org" },
L175: botchain: { defaultRpc: "https://rpc.botchain.ai", explorer: "https://scan.botchain.ai" },
...
L328: // Ordering it the other way — as 1.3.2 shipped — makes the default base fetch
L329: // the SPA shell and die inside JSON.parse.
L330: const DEFAULT_REGISTRY_PATHS = ["/api/providers", "/providers"];
...
L376: this.polygonRpc = opts.polygonRpc ?? opts.evmRpcUrls?.pol
Findings
2 Critical1 High3 Medium6 Low
CriticalWallet Draindist/unifiedAgent.js
CriticalTrigger Reachable Dangerous Capabilitydist/unifiedAgent.js
HighSemantic Analysis Limiteddist/crossChain.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @aifinpay/agent@2.11.1.
See all versions of @aifinpay/agent for other recorded verdicts.
- Review the evidence and your use of @aifinpay/agent@2.11.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.