registry / @aifinpay/agent / 2.6.4
@aifinpay/agent@2.6.4
AiFinPay SDK for global Agent Passport identity and route-verified AIFP-1/AIFP-2 settlement for autonomous AI agents.
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe wallet-transfer alert corresponds to exposed payment and bridge functionality that acts on caller-selected payment inputs. The manifest has no install hook, and the inspected runtime sources show no hidden transfer or credential-export behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A caller invokes an exported payment or bridge API.
Impact
The inspected paths do not establish hidden fund transfer, credential disclosure, or install-time mutation.
Mechanism
The bridge API builds a quote from caller-supplied options and executes that quote through the configured wallet.
AI rationale
The wallet-transfer alert corresponds to exposed payment and bridge functionality that acts on caller-selected payment inputs. The manifest has no install hook, and the inspected runtime sources show no hidden transfer or credential-export behavior.
Evidence
package.jsondist/index.jsdist/unifiedAgent.jsdist/crossChain.jsdist/facilitators/standard-x402.jsdist/wallet.js.lpm-dependency-evidence-7fec2587-6486-46fe-b3a7-3ae7c37cf0dc/0/npm-linux/package.json.lpm-dependency-evidence-7fec2587-6486-46fe-b3a7-3ae7c37cf0dc/0/npm-linux/dist/index.js.lpm-dependency-evidence-7fec2587-6486-46fe-b3a7-3ae7c37cf0dc/1/npm-linux/package.json.lpm-dependency-evidence-7fec2587-6486-46fe-b3a7-3ae7c37cf0dc/1/npm-linux/esm/secp256k1.js.lpm-dependency-evidence-7fec2587-6486-46fe-b3a7-3ae7c37cf0dc/2/npm-linux/package.json.lpm-dependency-evidence-7fec2587-6486-46fe-b3a7-3ae7c37cf0dc/2/npm-linux/esm/blake2b.js
Network endpoints1
li.quest/v1
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the SDK through dist entrypoints and has only a prepublishOnly build hook, not an install hook.
- The wallet dependency exports wallet derivation helpers; its manifest has no install script.
- Inspected crypto dependencies implement wallet cryptography and hashing.
- Cross-chain quotes use configured token addresses and the bridge call executes a supplied quote with the configured wallet.
- The x402 facilitator handles payment challenges as an SDK API; no hidden transfer path was identified.
Evidence against
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggeddist/unifiedAgent.jsView file
16import { createPublicClient, createWalletClient, http, keccak256, toHex, toFunctionSelector, formatEther, } from "viem";
L17: import { privateKeyToAccount } from "viem/accounts";
L18: import { viemWalletClientWallet } from "./agentWallet.js";
...
L173: const TRANSPORT_OVERRIDE = {
L174: polygon: { defaultRpc: "https://polygon.drpc.org" },
L175: botchain: { defaultRpc: "https://rpc.botchain.ai", explorer: "https://scan.botchain.ai" },
...
L324: // Ordering it the other way — as 1.3.2 shipped — makes the default base fetch
L325: // the SPA shell and die inside JSON.parse.
L326: const DEFAULT_REGISTRY_PATHS = ["/api/providers", "/providers"];
...
L371: this.polygonRpc = opts.polygonRpc ?? opts.evmRpcUrls?.polygon ?? "https://polygon.drpc.org";
L372: this.solanaRpc = opts.solanaRpc ?? pro
Critical
Wallet Drain
Source uses private key material to transfer cryptocurrency funds.
dist/unifiedAgent.jsView on unpkg · L1616Trigger-reachable chain: manifest.main -> dist/index.js -> dist/unifiedAgent.js
L16: import { createPublicClient, createWalletClient, http, keccak256, toHex, toFunctionSelector, formatEther, } from "viem";
L17: import { privateKeyToAccount } from "viem/accounts";
L18: import { viemWalletClientWallet } from "./agentWallet.js";
...
L173: const TRANSPORT_OVERRIDE = {
L174: polygon: { defaultRpc: "https://polygon.drpc.org" },
L175: botchain: { defaultRpc: "https://rpc.botchain.ai", explorer: "https://scan.botchain.ai" },
...
L324: // Ordering it the other way — as 1.3.2 shipped — makes the default base fetch
L325: // the SPA shell and die inside JSON.parse.
L326: const DEFAULT_REGISTRY_PATHS = ["/api/providers", "/providers"];
...
L371: this.polygonRpc = opts.polygonRpc ?? opts.evmRpcUrls?.pol
Findings
2 Critical1 High3 Medium6 Low
CriticalWallet Draindist/unifiedAgent.js
CriticalTrigger Reachable Dangerous Capabilitydist/unifiedAgent.js
HighSemantic Analysis Limiteddist/crossChain.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @aifinpay/agent@2.6.4.
See all versions of @aifinpay/agent for other recorded verdicts.
- Review the evidence and your use of @aifinpay/agent@2.6.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.