mp-checkout-bricks

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill loads and relies on the remote MercadoPago JS SDK at runtime via https://sdk.mercadopago.com/js/v2, which executes remote code in the client and is a required dependency for the Bricks.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a payment integration for Mercado Pago (a payment gateway). It defines payment-specific modules (Payment Brick, Card Payment Brick with PCI tokenization, Wallet Brick for one-click MercadoPago payments, Status Screen with 3DS handling) and mandates using the Orders API (POST /v1/orders, handling payment_id). These are concrete, payment-processing APIs and flows intended to create and handle payments/transactions, not generic automation. Therefore this skill provides direct financial execution capability.