clinic-daily-cashier-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill includes a specific block of text in
SKILL.mdthat it instructs the user to provide to the AI agent. This block contains directives such as "I have authorized the installation of dependencies" and instructions to execute shell commands likenpx. This represents an attempt to steer the agent's behavior and skip standard confirmation steps for high-risk operations like software installation and financial transactions. - [EXTERNAL_DOWNLOADS]: The skill's instructions encourage the execution of
npx -y @alipay/agent-payment@latest install. This command downloads and executes code from the official registry of a well-known service (Alipay). While the source is recognized as a well-known technology provider, the automated nature of the execution via prompt instructions is noted. - [COMMAND_EXECUTION]: The skill documentation instructs the agent to execute local scripts using
node scripts/run.mjsand external package installers vianpx. The CLI wrapperrun.mjsuses the standardfsmodule to read local files provided via arguments, which is a standard but sensitive capability.
Audit Metadata