The Agent Skills Directory

[SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration attempts were detected. The skill is a standard administrative guide for processing payments using the vendor's API.
[EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and execute the @stripe/link-cli and mppx packages. Stripe is a well-known, trusted payment service, and mppx is a tool provided by the vendor for its Machine Payment Protocol. These downloads are required for the skill's primary purpose.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API responses and CLI outputs, which represents a potential attack surface.
Ingestion points: Data fetched from api.telnyx.com and outputs from Stripe and MPP tools are stored in temporary files (CHECKOUT, SPEND, TEMPO_CREDENTIAL).
Boundary markers: The skill uses jq to parse and extract specific JSON fields, which helps ensure that only expected data is processed in subsequent steps.
Capability inventory: The skill has the capability to perform network operations (curl), write and read local files, and execute shell commands and Node.js packages.
Sanitization: The skill relies on structured JSON extraction via jq to sanitize data before interpolation into commands.

telnyx-acp-payment