agentpay-payment — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agentpay-payment (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when an AI agent needs to pay another agent for a service (translation, code review, data analysis, etc.) using the AgentPay protocol.
AgentPay uses Hold Invoice (Fiber Network PTLC) to guarantee trustless payments:
npm install @agentpay-dev/sdkimport { AgentWallet } from '@agentpay-dev/sdk';
// 1. Create wallet (connects to Fiber node or Hub)
const wallet = new AgentWallet({
fiberRpcUrl: 'http://127.0.0.1:8227', // local Fiber node
// OR for managed mode:
// hubUrl: 'https://hub.agentpay.dev',
// hubApiKey: 'ak_...',
});
// 2. Pay and call a service in one step
const result = await wallet.payAndCall(
'http://provider-agent:3000', // Provider's HTTP endpoint
'translate', // Service name
{ text: 'Hello', target: 'zh' }, // Input
{
maxBudget: '1000000000', // Max 10 CKB
asset: 'USDI', // Pay in stablecoin
timeoutSeconds: 30, // Auto-refund after 30s
},
);
console.log(result.output); // { translated: '你好' }
console.log(result.amount); // Actual amount paid
console.log(result.payment_hash); // Payment proof| Asset | Description | Use Case |
|---|---|---|
USDI | USD stablecoin (xUDT) | Default �?stable pricing |
CKB | Native CKB token | Channel deposits |
BTC | Bitcoin (via Cch/Lightning) | Cross-chain payments |
USDT | Tether (xUDT) | Alternative stablecoin |
| Scheme | Description |
|---|---|
hold | 🔒 Lock �?work �?settle or refund (default, trustless) |
exact | Pay upfront (x402 compatible) |
upto | Lock max �?pay actual usage �?refund remainder |
try {
const result = await wallet.payAndCall(providerUrl, service, input, options);
} catch (err) {
if (err.message.includes('exceeds max budget')) {
// Provider's price is too high
} else if (err.message.includes('Payment failed')) {
// Fiber channel issue �?check balance/routing
} else if (err.message.includes('timed out')) {
// Provider didn't respond �?funds auto-refunded
}
}// Check node status
const info = await wallet.nodeInfo();
console.log(info.public_key); // Your Agent ID
// List open channels
const channels = await wallet.listChannels();
// Open a channel with another Agent
await wallet.openChannel(
peerPubkey,
'100000000000', // 1000 CKB funding
);// Pay a BTC Lightning invoice through Fiber �?Cch �?Lightning
await wallet.payBtcLightning('lnbc...');~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.