franchise-royalty-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from user-supplied tables and includes this data in its output. While the logic is deterministic, there is a theoretical surface for indirect prompt injection if output is processed by a downstream agent without boundaries.
- Ingestion points: scripts/run.mjs reads input from local files.
- Boundary markers: Absent in output formatting.
- Capability inventory: File system access and arithmetic processing.
- Sanitization: None performed on input strings.
- [EXTERNAL_DOWNLOADS]: The documentation references official Alipay repositories for monetization purposes. These target a well-known service and are documented neutrally.
- [COMMAND_EXECUTION]: The skill facilitates the execution of local Node.js scripts for its primary function. It does not spawn arbitrary subprocesses or execute strings derived from user input.
Audit Metadata