mercadopago

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow includes handling webhook notifications (outsider-originating payment event payloads) via the webhook handler path that ingests req.body containing free-form fields like data/external_reference.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about a payment platform (MercadoPago) and references direct payment operations: it lists "Checkout API" (full API control), "Refunds" and "Subscriptions", and the "Process a payment" task explicitly instructs to "create payment via API". Those references indicate the skill is specifically designed for financial operations and documents API calls that move money.