create-mcp-app

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's describe/scaffold flow fetches user-supplied OpenAPI/Swagger spec URLs at runtime (e.g., it probes and fetches specs like https://petstore.swagger.io/v2/swagger.json via scripts/describe.mjs) and directly uses that fetched spec to generate tool source and scaffold code, so remote content controls code generation and agent prompts.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a SolvaPay-monetized MCP server: it wires in SolvaPay credentials (SOLVAPAY_SECRET_KEY, SOLVAPAY_PRODUCT_REF), calls for running npx -y solvapay@latest init to populate keys, documents registerPayable(name, config) for paid handlers, and defines intent tools that perform payment-related actions (upgrade, topup, manage_account, activate_plan, check_purchase). It describes mounting SolvaPay's checkout/topup widget and paywall behavior. These are specific payment-gateway integrations and handler primitives for making and managing payments, not generic tooling, so it grants direct financial execution capability.