registry / twzrd-x402-gate / 0.12.1
twzrd-x402-gate@0.12.1
Buyer-side x402 trust gate: free preflight before signing USDC on Solana + Base mainnet (eip155:8453). By default no signing if preflight is down; TWZRD_FAIL_OPEN overrides. Other EVM: unscored.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package declares no install-time hook; its prepublishOnly script runs release verification. Payment execution occurs only during an explicit safe-fetch run after an allowed check, with a documented advisory limitation, so the scanner leads do not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user imports the library or runs a CLI command; safe-fetch invokes its payer only after an allowed preflight.
Impact
No automatic credential theft, install-time collection, or unrequested account action was found.
Mechanism
The package probes the requested URL, checks a payment challenge, and may then invoke AgentCash. The adapter documents that its check is advisory because the payer makes a second request.
AI rationale
The package declares no install-time hook; its prepublishOnly script runs release verification. Payment execution occurs only during an explicit safe-fetch run after an allowed check, with a documented advisory limitation, so the scanner leads do not establish malicious behavior.
Network endpoints1
intel.twzrd.xyz
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only lifecycle hook is prepublishOnly, which runs release verification; no install hook is declared.
- The safe-fetch payment client is invoked only after the gate allows payment, and dry-run returns before invoking it.
- The CLI requires a user-supplied URL and displays help when invoked without arguments.
Evidence against
- When the user runs safe-fetch for an allowed payment, it invokes npx with agentcash@latest and inherits the process environment.
- The adapter labels its preflight advisory because AgentCash makes a second request that may differ from the one checked.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedbin/twzrd-safe-fetch.jsView file
5*/
L6: import { spawnSync } from "node:child_process";
L7: import { existsSync } from "node:fs";
High
Child Process
Package source references child process execution.
bin/twzrd-safe-fetch.jsView on unpkg · L5bin/twzrd-gate-eval-refuse.jsView file
28const pkgRoot = join(__dirname, "..");
L29: const require = createRequire(import.meta.url);
L30:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/twzrd-gate-eval-refuse.jsView on unpkg · L28bin/twzrd-gate-doctor.jsView file
33// tsx resolves `src` by absolute path, so the user's cwd is safe to keep.
L34: const r = spawnSync("npx", ["--yes", "tsx", src, ...process.argv.slice(2)], {
L35: stdio: "inherit",
Findings
1 Critical3 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/safe-fetch.js
HighChild Processbin/twzrd-safe-fetch.js
HighRuntime Package Installbin/twzrd-gate-doctor.js
HighSemantic Analysis Limiteddist/evidence-verify.js#virtual:normalized:round1
MediumDynamic Requirebin/twzrd-gate-eval-refuse.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to twzrd-x402-gate@0.12.1.
See all versions of twzrd-x402-gate for other recorded verdicts.
- Review the evidence and your use of twzrd-x402-gate@0.12.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.