ecommerce-refund-settlement-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions to run
npx -y @alipay/agent-payment@latest install. This command downloads and installs a package from the official registry of a well-known service (Alipay) to handle payments for the paid version of the tool. - [PROMPT_INJECTION]: The skill provides a pre-composed prompt for the user to provide to their AI assistant. This prompt contains instructions for the agent to install external software and process a purchase for specific product and merchant IDs. While this influences agent behavior, it is structured as a user-initiated upgrade guide with clear requests for human confirmation during the transaction.
Audit Metadata