registry / twzrd-x402-gate / 0.16.0
twzrd-x402-gate@0.16.0
Buyer-side x402 trust gate: free preflight before signing USDC on Solana + Base mainnet (eip155:8453). By default no signing if preflight is down; TWZRD_FAIL_OPEN overrides. Other EVM: unscored.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe inspected entry point is a library re-export surface, and the flagged subprocess belongs to an explicitly invoked payment-fetch command. Its advisory preflight limitation is disclosed in the source; no malicious collection, install hook, or unrelated automatic action was identified.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Importing the library exposes its APIs; network requests and subprocess execution occur when users invoke relevant functions or commands.
Impact
A user invoking safe-fetch may initiate a payment through AgentCash after preflight; the package documents that the second challenge might differ. No undisclosed collection or unrelated account action was found.
Mechanism
The safe-fetch command probes a requested URL, runs preflight, and may launch AgentCash; the doctor command reads the current project's package manifest and prints guidance and an offline refusal proof.
AI rationale
The inspected entry point is a library re-export surface, and the flagged subprocess belongs to an explicitly invoked payment-fetch command. Its advisory preflight limitation is disclosed in the source; no malicious collection, install hook, or unrelated automatic action was identified.
Evidence
process.cwd()/package.json (read by doctor)
Network endpoints1
intel.twzrd.xyz
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as a buyer-side x402 trust gate and sets its public entry point to dist/index.js.
- The public entry point re-exports library modules; the inspected entry contains no startup network or process-execution call.
- The safe-fetch CLI documents its preflight as advisory and warns that the payment challenge can change before AgentCash signs.
- The safe-fetch code invokes AgentCash only as part of its explicit fetch flow, passing the requested URL and options.
- The doctor describes its refusal proof as offline and spending nothing; its bin calls the doctor entry point when run.
Evidence against
- The safe-fetch flow invokes npx with agentcash@latest, which can install and run that CLI at command runtime.
- The documented TOCTOU gap means AgentCash may sign a different challenge from the one TWZRD preflighted.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggedbin/twzrd-safe-fetch.jsView file
5*/
L6: import { spawnSync } from "node:child_process";
L7: import { existsSync } from "node:fs";
High
Child Process
Package source references child process execution.
bin/twzrd-safe-fetch.jsView on unpkg · L5bin/twzrd-gate-eval-refuse.jsView file
28const pkgRoot = join(__dirname, "..");
L29: const require = createRequire(import.meta.url);
L30:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/twzrd-gate-eval-refuse.jsView on unpkg · L28bin/twzrd-gate-doctor.jsView file
33// tsx resolves `src` by absolute path, so the user's cwd is safe to keep.
L34: const r = spawnSync("npx", ["--yes", "tsx", src, ...process.argv.slice(2)], {
L35: stdio: "inherit",
Findings
1 Critical3 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/safe-fetch.js
HighChild Processbin/twzrd-safe-fetch.js
HighRuntime Package Installbin/twzrd-gate-doctor.js
HighSemantic Analysis Limiteddist/evidence-verify.js#virtual:normalized:round1
MediumDynamic Requirebin/twzrd-gate-eval-refuse.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to twzrd-x402-gate@0.16.0.
See all versions of twzrd-x402-gate for other recorded verdicts.
- Review the evidence and your use of twzrd-x402-gate@0.16.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.