mpp-client-fetch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow fetches documentation from npmjs.com, search engines, and mpp.dev, representing optional or search-driven ingestion of external documentation and web pages rather than automated unselected message feeds.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill specifically implements client-side payment handling via the mppx.fetch() API, which automates cryptocurrency wallet signing (privateKey: process.env.WALLET_PRIVATE_KEY) and payment tokens for handling HTTP 402 payment challenges. This meets the criteria for Direct Financial Execution Authority due to explicit crypto/wallet integration and payment fulfillment capabilities.