ucp-checkout-mcp

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow instructs the agent to fetch documentation from Shopify and search the web for UCP specifications, which represents low-risk ingestion of external web content.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill documentation explicitly defines MCP tools for e-commerce checkout and payment completion (create_checkout, complete_checkout, cancel_checkout), integrating with payment/commerce systems like Shopify to execute purchases and financial transactions.