alipay-pay-for-service
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official
@alipay/agent-paymentpackage from the npm registry. It incorporates a mandatory integrity check using a SHA-512 hash and version locking to ensure the security and authenticity of the downloaded code.- [COMMAND_EXECUTION]: The skill utilizes thealipay-botCLI for payment operations. It provides explicit instructions for the agent to sanitize all inputs by wrapping them in single quotes and performing domain whitelist verification (restricted toalipay.comsubdomains) on payment links before execution.- [DATA_EXFILTRATION]: While the skill interacts with external Alipay services, it is limited to official vendor infrastructure. It includes specific safety guidelines to filter sensitive user information, such as ID numbers and bank card details, from any output presented to the user.
Audit Metadata