mp-security
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for implementing Mercado Pago security products (3D Secure, Supertoken, Vault, and Tokenization). Analysis of SKILL.md and references/security-guide.md confirms the content is purely instructional.
- [SAFE]: No prompt injection attempts, such as instructions to override safety filters or reveal system prompts, were found in the skill body or metadata.
- [SAFE]: External references are limited to official vendor domains (sdk.mercadopago.com) and documentation placeholders. These are legitimate resources for the skill's stated purpose.
- [SAFE]: The skill explicitly advises on security best practices, such as maintaining Access Tokens on the server-side and opting for tokenization over handling raw card data to minimize PCI compliance requirements.
- [SAFE]: No obfuscation, data exfiltration patterns, or unauthorized command execution triggers were identified across the provided files.
Audit Metadata