mpp-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md "Before writing code" section explicitly instructs the agent to fetch live public docs (https://www.npmjs.com/package/mppx, https://docs.stripe.com/payments/machine and web-searches on github.com and mpp.dev), so the agent will ingest and act on untrusted third‑party content that can materially alter tool use and scaffolded code.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly designed to implement payments. It references specific payment gateways and crypto integrations (Stripe machine payments, STRIPE_SECRET_KEY env var), a Tempo crypto configuration (TEMPO_RECIPIENT_ADDRESS, TEMPO_CHAIN_ID, TEMPO_USDC_CONTRACT), and shows concrete SDK calls that perform charges (e.g., mppx.charge(), tempo.charge({...}) and mppx.fetch() for consuming paid APIs). These are not generic tools — they are explicit payment/crypto APIs and configuration to send/receive funds and create paid endpoints. Therefore it grants direct financial execution capability.