website-checkout

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly directs runtime retrieval of external documentation via https://docs.solvapay.com/llms.txt (used as a fallback “direct page fetch” to resolve topics), which would be fetched and injected to guide the agent’s behavior and thus can directly control prompts.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly a payment integration: it instructs configuring SOLVAPAY_SECRET_KEY, creating server-side checkout sessions, using a hosted checkout and customer portal, and wiring webhooks. Those are specific payment-gateway operations (i.e., direct financial execution capabilities), not generic automation or API callers.