registry / @aifinpay/agent / 2.7.0
@aifinpay/agent@2.7.0
AiFinPay SDK for global Agent Passport identity and route-verified AIFP-1/AIFP-2 settlement for autonomous AI agents.
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe scanner’s wallet-transfer signal corresponds to caller-invoked payment functionality, and the inspected bridge path checks the supplied transaction before signing. The install-related script is a build command, with no malicious install behavior identified in the inspected source.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A caller invokes a payment or bridge method with payment details or a quote.
Impact
No unrequested or automatic fund transfer was established.
Mechanism
The SDK signs the requested payment or validated bridge transaction; inspected code did not show an automatic transfer trigger.
AI rationale
The scanner’s wallet-transfer signal corresponds to caller-invoked payment functionality, and the inspected bridge path checks the supplied transaction before signing. The install-related script is a build command, with no malicious install behavior identified in the inspected source.
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points runtime imports to dist/index.js, and its prepublishOnly command runs a build.
- Bridge amounts and tokens come from caller inputs; execution checks the source chain and validates the transaction before signing.
- The x402 facilitator validates a payment requirement and applies any configured amount cap before signing for its specified recipient.
- The wallet dependency exports wallet creation and derivation helpers; the inspected curve and hash dependencies contain cryptographic implementations.
Evidence against
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggeddist/unifiedAgent.jsView file
16import { createPublicClient, createWalletClient, http, keccak256, toHex, toFunctionSelector, formatEther, } from "viem";
L17: import { privateKeyToAccount } from "viem/accounts";
L18: import { viemWalletClientWallet } from "./agentWallet.js";
...
L173: const TRANSPORT_OVERRIDE = {
L174: polygon: { defaultRpc: "https://polygon.drpc.org" },
L175: botchain: { defaultRpc: "https://rpc.botchain.ai", explorer: "https://scan.botchain.ai" },
...
L324: // Ordering it the other way — as 1.3.2 shipped — makes the default base fetch
L325: // the SPA shell and die inside JSON.parse.
L326: const DEFAULT_REGISTRY_PATHS = ["/api/providers", "/providers"];
...
L372: this.polygonRpc = opts.polygonRpc ?? opts.evmRpcUrls?.polygon ?? "https://polygon.drpc.org";
L373: this.solanaRpc = opts.solanaRpc ?? pro
Critical
Wallet Drain
Source uses private key material to transfer cryptocurrency funds.
dist/unifiedAgent.jsView on unpkg · L1616Trigger-reachable chain: manifest.main -> dist/index.js -> dist/unifiedAgent.js
L16: import { createPublicClient, createWalletClient, http, keccak256, toHex, toFunctionSelector, formatEther, } from "viem";
L17: import { privateKeyToAccount } from "viem/accounts";
L18: import { viemWalletClientWallet } from "./agentWallet.js";
...
L173: const TRANSPORT_OVERRIDE = {
L174: polygon: { defaultRpc: "https://polygon.drpc.org" },
L175: botchain: { defaultRpc: "https://rpc.botchain.ai", explorer: "https://scan.botchain.ai" },
...
L324: // Ordering it the other way — as 1.3.2 shipped — makes the default base fetch
L325: // the SPA shell and die inside JSON.parse.
L326: const DEFAULT_REGISTRY_PATHS = ["/api/providers", "/providers"];
...
L372: this.polygonRpc = opts.polygonRpc ?? opts.evmRpcUrls?.pol
Findings
2 Critical1 High3 Medium6 Low
CriticalWallet Draindist/unifiedAgent.js
CriticalTrigger Reachable Dangerous Capabilitydist/unifiedAgent.js
HighSemantic Analysis Limiteddist/crossChain.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
Affected versions and remediation
This report applies to @aifinpay/agent@2.7.0.
See all versions of @aifinpay/agent for other recorded verdicts.
- Review the evidence and your use of @aifinpay/agent@2.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.