mpp-charge-flow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow explicitly fetches live public web pages at runtime (e.g., https://www.npmjs.com/package/mppx, https://paymentauth.org/, GitHub search results, and Stripe docs), and those fetched pages’ readable text can be ingested into the agent’s LLM context, creating an outsider-authored free-text injection surface.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly about implementing "charge"/payment flows. It references specific payment integrations (Stripe, USDC/Tempo, Lightning/on‑chain transactions), a charge middleware (mppx.charge), client fulfillment of payments, verification of payment proofs, and server-side APIs that enforce per-request settlement. These are specific, purpose-built financial execution capabilities (initiating/validating payments and integrating with payment providers), not generic tooling.