ap2-mcp-server

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches documentation, releases, and searches GitHub for AP2 MCP server specifications and implementations.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly discusses integrating payment tools via the Model Context Protocol (MCP), including transaction processing capabilities such as process_payment, create_cart_mandate, and mandate creation/signing tools for agent access to payment capabilities.