mpp-session-flow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow explicitly fetches live public web content at runtime (e.g., https://www.npmjs.com/package/mppx, https://paymentauth.org/, and web-search results), which can include outsider-authored free text that the agent may ingest into the LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill is explicitly designed for streaming micropayments and payment-channel sessions. It describes creating payment channels, authorizing a spending cap, deducting micropayments from that cap per request, refilling/extending caps, and final on-chain settlement. The example middleware (mppx.session({ maxAmount: '10000' })) and the session lifecycle (Open → Authorize → Active → Close → Settled) indicate programmatic control over locking funds, updating channel state, and settling transactions. Those are direct financial execution capabilities (payment channel creation, micropayments, and on-chain settlement), not generic tooling.