Skip to main content

a2a-shib-payments

Enables agent-to-agent SHIB payments on Polygon with trustless escrow, price negotiation, and a reputation system, significantly reducing costs.

Install this skill

or
88/100

Security score

The a2a-shib-payments skill was audited on Feb 16, 2026 and we found 8 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 121

Fetch to external URL

SourceSKILL.md
121const result = await fetch('http://localhost:8003/a2a/jsonrpc', {
medium line 89

Access to .env file

SourceSKILL.md
89Create `.env.local`:
low line 92

Access to .env file

SourceSKILL.md
92cp .env.example .env.local
low line 93

Access to .env file

SourceSKILL.md
93nano .env.local
low line 98

External URL reference

SourceSKILL.md
98- `RPC_URL` - Polygon RPC endpoint (default: https://polygon-rpc.com)
low line 115

External URL reference

SourceSKILL.md
115**Agent Card:** `http://localhost:8003/.well-known/agent-card.json`
low line 121

External URL reference

SourceSKILL.md
121const result = await fetch('http://localhost:8003/a2a/jsonrpc', {
low line 287

External URL reference

SourceSKILL.md
287- **A2A Protocol:** https://a2a-protocol.org
Scanned on Feb 16, 2026
View Security Dashboard
Installation guide →