mpp-charge-flow
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as an instructional guide for developers implementing pay-per-call API monetization. It contains no executable code or malicious patterns. Findings indicate the following benign behaviors:
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch documentation from well-known and relevant services including NPM (npmjs.com) for the mppx package, Stripe (docs.stripe.com) for payment integration details, and the paymentauth.org protocol specification site.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes handling external data such as Authorization headers and request parameters (e.g., size-based pricing), these are standard API implementation patterns and do not present an immediate vulnerability in the context of this documentation skill.
Audit Metadata