mpp-server-middleware

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The REQUIRED workflow explicitly fetches live public web content at runtime (e.g., https://www.npmjs.com/package/mppx, https://docs.stripe.com/..., and web-search results), and those fetched pages’ readable text would be ingested into the agent’s LLM context for summarization/implementation guidance.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a payment middleware: it defines mppx.create(...) with a secretKey and a methods array that includes provider-specific configs (examples show stripe.charge and tempo.charge). It exposes mppx.charge({ amount }) and mppx.session({ maxAmount }) to enforce payments, implements the full 402 challenge-response flow (challenge, verify proof of payment, add Payment-Receipt), and references Stripe and on-chain verification. These are concrete, provider-specific payment integration points (including Stripe) and therefore enable direct financial execution.