bank-loan-interest-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The core logic of the skill is implemented in
scripts/engine/bank-loan-interest-check.js, which performs mathematical validation of loan data using standard Node.js libraries. The code does not perform network operations, access sensitive credentials, or request elevated privileges. - [EXTERNAL_DOWNLOADS]: The
SKILL.mdfile contains instructions for an optional paid upgrade, which involves downloading a payment integration package (@alipay/agent-payment) and visiting official documentation onalipay.com. These references target official resources from a well-known service provider and are presented as optional, user-initiated steps. - [PROMPT_INJECTION]: The skill documentation includes a template prompt designed to guide an AI assistant through a purchase workflow for a paid version. This prompt includes explicit safety requirements, mandating that any payment or wallet authorization must be confirmed by the user via an official link or QR code.
Audit Metadata