mp-checkout-online
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation resource for Mercado Pago's online payment flows. It provides legitimate integration patterns and emphasizes critical security practices like server-side status verification.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials or secrets were identified. The instructions properly treat API keys and tokens as developer prerequisites without exposing actual values.
- [REMOTE_CODE_EXECUTION]: No suspicious remote code execution or script download patterns were detected. The mentioned SDK packages ('mercadopago') are legitimate vendor-provided libraries.
- [PROMPT_INJECTION]: The skill instructions do not contain any attempt to override agent instructions, bypass safety filters, or extract system-level prompts.
Audit Metadata