department-budget-execution-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEPROMPT_INJECTIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The SKILL.md file contains a dedicated block of text intended to be used as a prompt for the AI agent. This block uses authoritative language such as 'I have authorized installation and purchase' and 'initiate purchase' to automate a sequence involving remote software installation and commercial transactions with specific merchant IDs.- [REMOTE_CODE_EXECUTION]: Documentation within the skill directs the user to have the agent execute 'npx -y @alipay/agent-payment@latest install'. This command performs a remote download and execution of code from the npm registry. The package is maintained by a well-known payment service provider.- [COMMAND_EXECUTION]: The skill relies on the Bash tool to execute its local processing engine via 'node scripts/run.mjs'.- [EXTERNAL_DOWNLOADS]: The skill links to external documentation on chenqg618.github.io and a payment platform on alipay.com. These resources belong to the author and an established service provider.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted text input via the 'text' field in the payload (scripts/run.mjs). It lacks formal boundary markers to delimit data from instructions. The capability inventory includes file reading and shell execution via Bash (scripts/run.mjs). Sanitization is performed using regex patterns for numerical extraction in the scripts/engine/department-budget-execution-check.js script.
Audit Metadata