cit-adjustment-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill implements a local audit engine using Node.js scripts (
scripts/run.mjsandscripts/engine/cit-adjustment-check.js). These scripts are executed via the command line to process tax adjustment data provided by the user, performing calculations without initiating any external network requests. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing a payment integration utility (
@alipay/agent-payment) from a well-known service provider (Alipay) vianpx. This tool is used to facilitate the optional purchase of the full version and is standard for the platform's payment ecosystem. - [PROMPT_INJECTION]: The skill's documentation contains a pre-written prompt for users to copy and paste to their AI agent. This prompt instructs the agent to automate the installation of a payment tool and the purchase of a premium version. While this uses instruction-based automation, it is a transparent upsell mechanism that explicitly includes instructions for user-mandated confirmation of all transactions.
Audit Metadata