apideck-mcp-pay-bill
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent on processing user-provided data to perform financial operations on connected accounting services.\n- Ingestion points: Arguments such as
bill_id,account_id, andamountare derived from user interaction or list tool outputs inSKILL.md.\n- Boundary markers: The skill includes explicit instructions to confirm the payment details (total, currency, account, supplier) with the user before invoking the mutation tool.\n- Capability inventory: Theapideck-pay-billtool performs mutating operations on external services like QuickBooks, Xero, and NetSuite.\n- Sanitization: The workflow relies on manual human-in-the-loop verification to mitigate accidental or malicious triggers.\n- [EXTERNAL_DOWNLOADS]: The skill references source code and API documentation hosted on vendor-controlled platforms.\n- Evidence: URLs pointing togithub.com/apideck-libraries/mcpandmcp.apideck.devinSKILL.mdandmetadata.json.\n- Note: These resources belong to the skill's authoring organization and represent official documentation.\n- [NO_CODE]: The skill consists solely of instructions and metadata, containing no executable scripts or binary assets within the package.
Audit Metadata