扫描报告
0 /100
mpp
Build with MPP (Machine Payments Protocol) - the open protocol for machine-to-machine payments over HTTP 402
This is a pure documentation-only skill containing no executable code, scripts, or dependencies. The MPP (Machine Payments Protocol) skill provides informational content about an HTTP 402 payment protocol and is entirely composed of Markdown reference files with no security-relevant functionality.
可以安装
No action needed. This skill is safe to use as it contains only documentation files with no executable or potentially harmful components.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | NONE | NONE | — | No code files present; all files are Markdown documentation and LICENSE.txt |
| 网络访问 | NONE | NONE | — | No network calls in any file; only reference URLs in documentation text |
| 命令执行 | NONE | NONE | — | No shell scripts, no Bash invocations, no subprocess calls |
| 环境变量 | NONE | NONE | — | No .env file or environment variable access in any file |
| 技能调用 | NONE | NONE | — | No skill invocation chains or cross-skill calls detected |
| 剪贴板 | NONE | NONE | — | No clipboard access in any file |
| 浏览器 | NONE | NONE | — | No browser automation or web scraping code |
| 数据库 | NONE | NONE | — | No database connections or SQL in any file |
28 项发现
中危 外部 URL 外部 URL
https://www.apache.org/licenses/ LICENSE.txt:3 中危 外部 URL 外部 URL
https://datatracker.ietf.org/doc/draft-ryan-httpauth-payment/ SKILL.md:12 中危 钱包地址 加密货币钱包地址
0x20c0000000000000000000000000000000000000 SKILL.md:73 中危 外部 URL 外部 URL
https://api.example.com/paid SKILL.md:98 中危 钱包地址 加密货币钱包地址
0x20C000000000000000000000b9537d11c60E8b50 SKILL.md:363 中危 外部 URL 外部 URL
https://paymentauth.org SKILL.md:526 中危 外部 URL 外部 URL
https://docs.stripe.com/payments/machine/mpp SKILL.md:527 中危 外部 URL 外部 URL
https://docs.tempo.xyz SKILL.md:528 中危 外部 URL 外部 URL
https://mpp.dev/llms-full.txt SKILL.md:529 中危 外部 URL 外部 URL
https://api.example.com/data references/custom-methods.md:222 中危 外部 URL 外部 URL
https://paymentauth.org/problems/payment-required references/protocol-spec.md:25 中危 钱包地址 加密货币钱包地址
0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266 references/protocol-spec.md:57 中危 钱包地址 加密货币钱包地址
0x1234567890abcdef1234567890abcdef12345678 references/protocol-spec.md:145 中危 外部 URL 外部 URL
https://paymentauth.org/problems/ references/protocol-spec.md:215 中危 外部 URL 外部 URL
https://paymentauth.org/problems/payment-expired references/protocol-spec.md:236 中危 外部 URL 外部 URL
https://api.example.com/submit references/python-sdk.md:150 中危 外部 URL 外部 URL
https://api.example.com/update references/python-sdk.md:153 中危 外部 URL 外部 URL
https://api.example.com/item/123 references/python-sdk.md:156 中危 外部 URL 外部 URL
https://api.example.com/partial references/python-sdk.md:159 中危 外部 URL 外部 URL
https://api.example.com/stream references/python-sdk.md:205 中危 外部 URL 外部 URL
https://api.example.com references/python-sdk.md:323 中危 钱包地址 加密货币钱包地址
0x33b901018174DDabE4841042ab76ba85D4e24f25 references/sessions.md:136 中危 钱包地址 加密货币钱包地址
0xe1c4d3dce17bc111181ddf716f75bae49e61a336 references/sessions.md:137 中危 外部 URL 外部 URL
https://rpc.tempo.xyz references/sessions.md:171 中危 钱包地址 加密货币钱包地址
0x20c000000000000000000000b9537d11c60e8b50 references/tempo-method.md:84 中危 外部 URL 外部 URL
https://sponsor.example.com references/tempo-method.md:86 中危 外部 URL 外部 URL
https://docs.stripe.com/crypto/deposit-mode references/tempo-method.md:329 中危 外部 URL 外部 URL
https://api.example.com/chat references/typescript-sdk.md:354 目录结构
12 文件 · 119.7 KB · 3730 行 Markdown 11f · 3568L
Text 1f · 162L
├─
▾
references
│ ├─
custom-methods.md
Markdown
│ ├─
lightning-method.md
Markdown
│ ├─
protocol-spec.md
Markdown
│ ├─
python-sdk.md
Markdown
│ ├─
rust-sdk.md
Markdown
│ ├─
sessions.md
Markdown
│ ├─
stripe-method.md
Markdown
│ ├─
tempo-method.md
Markdown
│ ├─
transports.md
Markdown
│ └─
typescript-sdk.md
Markdown
├─
LICENSE.txt
Text
└─
SKILL.md
Markdown
安全亮点
✓ No executable code or scripts present — all files are Markdown documentation
✓ No .env files or credential exposure
✓ No shell execution, subprocess, or system command calls
✓ No network requests from code — only reference URLs in documentation
✓ No obfuscation techniques (no base64, eval, or encoded payloads)
✓ No sensitive path access (no ~/.ssh, ~/.aws, or similar paths)
✓ No dependency files (requirements.txt, package.json, Cargo.toml) that could introduce supply chain risk
✓ Clear and comprehensive documentation of the MPP protocol with no hidden functionality
✓ Crypto wallet addresses in documentation are test/example addresses, not real credentials
✓ Skill metadata is properly declared in SKILL.md frontmatter (name, version 0.5.1)