ap2-payment-processor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches documentation from ap2-protocol.org and performs web searches for reference implementations on GitHub, which constitutes low-risk exposure to external web content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is specifically designed to build an AP2 Merchant Payment Processor (MPP) that constructs payment authorization messages, requests credentials, processes payments through payment gateways and card networks (Stripe, Adyen, Visa, Mastercard), and handles financial transactions.