apideck-mcp-pay-bill

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent on processing user-provided data to perform financial operations on connected accounting services.\n- Ingestion points: Arguments such as bill_id, account_id, and amount are derived from user interaction or list tool outputs in SKILL.md.\n- Boundary markers: The skill includes explicit instructions to confirm the payment details (total, currency, account, supplier) with the user before invoking the mutation tool.\n- Capability inventory: The apideck-pay-bill tool performs mutating operations on external services like QuickBooks, Xero, and NetSuite.\n- Sanitization: The workflow relies on manual human-in-the-loop verification to mitigate accidental or malicious triggers.\n- [EXTERNAL_DOWNLOADS]: The skill references source code and API documentation hosted on vendor-controlled platforms.\n- Evidence: URLs pointing to github.com/apideck-libraries/mcp and mcp.apideck.dev in SKILL.md and metadata.json.\n- Note: These resources belong to the skill's authoring organization and represent official documentation.\n- [NO_CODE]: The skill consists solely of instructions and metadata, containing no executable scripts or binary assets within the package.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 06:32 PM