alipay-enterprise-scenario-integration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The validator (scripts/validate_codegen.js -> fetchLatestAlipaySdkVersion) runs curl at runtime to fetch https://central.sonatype.com/artifact/com.alipay.sdk/alipay-sdk-java and uses the fetched page to decide Java SDK version (a required SDK preflight that gates code generation), so this runtime external fetch directly controls the agent's generation/validation decisions.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). 该 Skill 专门用于支付宝“企业码”场景接入与企业级支付款/费控/账单的集成与编排。描述中明确依赖并装配子 Skill（alipay-enterprise-ec / alipay-enterprise-expense-control / alipay-enterprise-bill），涉及制度、额度管理、账单、订单同步和对账等支付/出账/费控相关域，并在代码生成阶段产生调用接口的代码与 SDK 预检。其主要目的就是与支付宝企业级支付/账单/费控接口对接，属于明确为金融/支付操作而设计的 Skill，应视为具有直接金融执行风险。