jp-validate

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly re-fetches Juspay documentation at runtime via the docs-mcp/doc_fetch_tool and therefore relies on external doc URLs (e.g. *.juspay.io, *.juspay.in, dth95m2xtyv8v.cloudfront.net) whose content directly controls the generated tests and instructions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is specifically about validating a Juspay payment integration (a payment gateway). It explicitly covers designing and running tests that perform transactions (web transaction drive using test cards/VPAs), backend tests including refunds/payouts, and may run live transactions that "move money" against production. It also references an auth-guarded juspay-mcp mode for integration actions. These are specific payment-gateway operations (not generic tooling), so this grants direct financial execution capability.