apideck-mcp-receive-payment
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from accounting tools (such as invoices and accounts) and uses these inputs to execute financial transactions. This represents a potential surface for indirect prompt injection if external invoice data contained malicious instructions. However, the skill implements a mandatory human-in-the-loop mitigation by requiring the agent to show the user the transaction details and wait for explicit confirmation before performing the operation.
- [EXTERNAL_DOWNLOADS]: The skill and its metadata reference documentation and source code hosted on the vendor's official domains and GitHub repository. These references are used for informational purposes and to point to the workflow implementation, representing standard vendor functionality.
Audit Metadata