sumup-mcp

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill declares and uses the MCP server URL https://mcp.sumup.com/mcp as a runtime tool dependency (tools discovery/transport) which the agent will contact to load tool descriptors that directly control available prompts/actions, so this external endpoint can influence agent instructions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). This skill is explicitly about a payment gateway (SumUp MCP) and includes server endpoints, auth flow, and prompt patterns that perform payment operations: e.g., "Create a sandbox checkout for 12.34 EUR and return the checkout id", "List my SumUp merchant checkouts...", and instructions to verify checkout status and reconcile failed payments. These are specific, payment-focused APIs/operations (creating/listing checkouts, reconciling payments), not generic tooling, and therefore constitute direct financial execution capability.