The Agent Skills Directory

[SAFE]: The skill provides detailed documentation and code examples for integrating MercadoPago payment solutions across various platforms. It emphasizes critical security best practices, including the use of environment variables for sensitive access tokens, mandatory card tokenization to comply with PCI DSS standards, and the implementation of 3D Secure (3DS) authentication.
[INDIRECT_PROMPT_INJECTION]: The skill identifies and documents potential attack surfaces where untrusted data from external sources is ingested into the application flow.
Ingestion points: Notification handlers for webhooks (references/webhooks.md) and onSubmit callbacks for frontend payment components (references/checkout-bricks.md).
Boundary markers: While explicit prompt delimiters are not provided in the code snippets, the documentation strongly advises the use of strict input validation.
Capability inventory: The associated agent tools are limited to searching documentation, managing test users, and configuring webhook endpoints.
Sanitization: The skill provides robust remediation guidance, including specific code examples for HMAC-SHA256 signature validation for webhooks and comprehensive server-side input sanitization routines in references/security.md and references/webhooks.md.

mercadopago