alipay-enterprise-scenario-integration
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to verify versions and metadata. Specifically,
tools/check_version.jsfetches update information from the official Alipay GitHub repository (raw.githubusercontent.com/alipay/ai/...), andscripts/validate_codegen.jsretrieves SDK version data from the Sonatype Central Portal (central.sonatype.com). These operations are directed at trusted vendor resources and established technological services. - [COMMAND_EXECUTION]: The skill utilizes several standard development tools and system commands, including
mvn,npm,go,dotnet,python3,jar, andunzip. These commands are executed to install bundled sub-skills and to run quality gates (such as compilation checks and automated tests) on the code generated by the agent, ensuring the output is valid and functional. - [DATA_EXFILTRATION]: There is no evidence of unauthorized data exposure or exfiltration. Network connectivity is restricted to retrieving metadata and does not involve transmitting sensitive local information or credentials to external parties.
Audit Metadata