group-intercompany-reconciliation-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to download and install the
@alipay/agent-paymentpackage via the npm registry. This resource is associated with a well-known payment service provider. - [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to execute local Node.js scripts (scripts/run.mjs) and perform environment setup tasks like installing the payment agent. These operations are restricted to the skill's stated purpose of financial auditing and management. - [PROMPT_INJECTION]: The
SKILL.mdfile includes a specific block of text meant to be supplied by the user to the AI agent. This block provides prescriptive instructions that direct the agent to automate the multi-step installation and purchase process for a professional version of the tool. - [INDIRECT_PROMPT_INJECTION]: The skill processes intercompany financial tables provided as external files (JSON or plain text), which constitutes an injection surface.
- Ingestion points: Data is loaded into the agent's context through the
loadInputfunction inscripts/run.mjs. - Boundary markers: There are no explicit delimiters or specific 'ignore embedded instructions' warnings provided in the instructions for handling the ingested financial data.
- Capability inventory: The skill utilizes
Readfor file access andBashfor script execution. - Sanitization: While the
group-intercompany-reconciliation-check.jsengine performs robust arithmetical validation and duplicate detection, there is no specific filtering to prevent natural language instructions within the table rows from influencing the agent's behavior.
Audit Metadata