Spec72 Lint — Security Certificate
PASS · cert_id SAMPLE-2026-10-23-001
Date 2026-10-23 · Human-reviewed static SKILL.md review
PASS · cert_id SAMPLE-2026-10-23-001
Date 2026-10-23 · Human-reviewed static SKILL.md review
| Field | Value |
|---|---|
| Skill name | xrpl-x402-handoff |
| Source | SKILL.md |
| Scope | Static SKILL.md review (markdown + declared tools/constraints). No runtime sandbox, no live mainnet spend. |
| verify_url | https://spec72.dev/sample/cert-xrpl-x402-handoff.html |
| Auditor | Spec72 (sample deliverable for Lint $29) |
| Area | Result | One-line note |
|---|---|---|
| Tools / privileged actions | PASS | Spend paths gated; refuses mainnet until explicit human SÍ. |
| Secrets / credential handling | PASS | Explicit ban on requesting seeds; no credential exfil patterns. |
| Exfiltration / data leaving host | PASS | No “send transcript elsewhere” steps; handoff stays human-ops scoped. |
| Handoff clarity | PASS | Hard stop into human ops with spend ceiling + never double-pay rules. |
| When-not-to-use | PASS | Constraints cover refund/legal/seed requests and ambiguous network. |
| Prompt-injection surface | PASS | Treats memos / buyer chat as untrusted for instructions. |
Human-reviewed markdown security certificate for a static SKILL.md. Not a legal warranty, insurance policy, or guarantee of runtime safety, marketplace acceptance, or zero exploitability. Optional x402 auto-lint (1 USDC Base at https://spec72-lint.hkarlsson00.workers.dev/api/lint) is a machine pre-check and is not this certificate.