Security audit
Security checks for vulnerabilities and agentic risk
This skill clearly describes a paid MPP Router discovery and payment handoff flow, with visible mainnet-payment warnings and confirmation gating.
Install this only if you want agents to discover and use paid MPP Router services. Review prompts carefully when a task could be handled without paid routing, and rely on the payment confirmation step before any Stellar mainnet spend.
The trigger examples in the frontmatter are broad enough to match generic requests like summarization, search, or 'find a service' even when the user may not intend to use a paid Stellar-backed router. In this skill's context, mistaken activation is more dangerous than usual because it can steer the agent toward live catalog lookup and potentially real-money mainnet payment flows.
The 'When to trigger' section relies mostly on examples and a broad name-match rule, without clearly excluding adjacent intents like ordinary web search, scraping, or summarization. This ambiguity can cause over-activation, and in a payment-enabled skill that increases the chance of unnecessary service discovery, confusing user experience, or escalation into a payment flow the user did not intend.
No suspicious patterns detected.
