mpp-conformance
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a set of checklists for protocol compliance and production readiness for Machine Payment Protocol (MPP) integrations. It promotes industry-standard security practices such as transport layer security (TLS 1.2+), HMAC-based challenge binding, and the use of environment variables for secret management.
- [EXTERNAL_DOWNLOADS]: The skill references and fetches documentation from authoritative sources including paymentauth.org and the IETF datatracker (ietf.org). These external references are used neutrally to provide the agent with the necessary specifications for conducting a conformance audit.
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to perform web searches on official Stripe documentation (docs.stripe.com) to ensure production readiness. Stripe is a well-known and trusted payment service provider.
- [SAFE]: No evidence of credential theft, data exfiltration, or malicious code execution was found. The skill's operations are consistent with its primary purpose as an auditing tool.
Audit Metadata