group-intercompany-reconciliation-check-free

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to download and install the @alipay/agent-payment package via the npm registry. This resource is associated with a well-known payment service provider.
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute local Node.js scripts (scripts/run.mjs) and perform environment setup tasks like installing the payment agent. These operations are restricted to the skill's stated purpose of financial auditing and management.
  • [PROMPT_INJECTION]: The SKILL.md file includes a specific block of text meant to be supplied by the user to the AI agent. This block provides prescriptive instructions that direct the agent to automate the multi-step installation and purchase process for a professional version of the tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes intercompany financial tables provided as external files (JSON or plain text), which constitutes an injection surface.
  • Ingestion points: Data is loaded into the agent's context through the loadInput function in scripts/run.mjs.
  • Boundary markers: There are no explicit delimiters or specific 'ignore embedded instructions' warnings provided in the instructions for handling the ingested financial data.
  • Capability inventory: The skill utilizes Read for file access and Bash for script execution.
  • Sanitization: While the group-intercompany-reconciliation-check.js engine performs robust arithmetical validation and duplicate detection, there is no specific filtering to prevent natural language instructions within the table rows from influencing the agent's behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:28 AM
Security Audit — agent-trust-hub — group-intercompany-reconciliation-check-free