mp-test-setup
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a workflow for creating and funding test users within the Mercado Pago sandbox, utilizing official vendor tools (
mcp__plugin_mercadopago_mcp__*). - [SAFE]: It incorporates a safety check to detect production credentials (
APP_USR-vsTEST-context), blocking execution if production tokens are used to prevent accidental real-world transactions. - [SAFE]: The instructions explicitly discourage insecure practices, such as writing access tokens to files or committing them to version control, and emphasize using the official Developer Dashboard for production secrets.
- [SAFE]: Data ingestion from project configuration files (
.mp-integrate-progress.md) is limited to non-sensitive state like country identifiers for session persistence. - [SAFE]: External references are restricted to official Mercado Pago documentation and dashboard domains.
Audit Metadata