commercevault-edd-commerce-orchestrator

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Most links are benign placeholders or local/dev endpoints, but the GitHub repository (https://github.com/dhapat3927/mcp-edd-analytics-vantage.git) is an unvetted third‑party source — cloning and running install commands from an unknown GitHub user can execute arbitrary code (postinstall scripts, malicious dependencies), so the overall set is moderately suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). CommerceVault’s runtime workflow fetches and ingests outsider-authored free text from the Easy Digital Downloads (EDD) WordPress REST API (e.g., product/order/customer fields like names, notes, and other content) into the agent’s LLM context via the skill’s API responses.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is a commerce/orchestration middleware explicitly built for order and payment workflows. It includes API calls that reference payment gateways (example: payment.gateway: 'stripe' with a Stripe transactionId 'ch_xxxxxxx'), programmatic order creation, and order status updates (including setting status to 'refunded'). It also configures e‑commerce adapters (EDD, WooCommerce) using API credentials. These elements show explicit, specific integration points for payment processing and order lifecycle actions (including refunds), which constitute direct financial execution capability.