input-vat-deduction-check-free

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation references the @alipay/agent-payment package. This resource is provided by a well-known financial services organization as part of its official AI payment integration toolkit.
  • [REMOTE_CODE_EXECUTION]: The installation instructions suggest running the command npx -y @alipay/agent-payment@latest install. This initiates the download and execution of the payment utility, which is a standard procedure for this recognized service.
  • [PROMPT_INJECTION]: The documentation includes a prompt template for the user to provide to their AI assistant. This template contains language aimed at managing the agent's authorization flow during a purchase ('我已授权安装依赖' and '不要替我确认'). These are specific instructions used by the Alipay Agent Payment protocol to coordinate secure transactions between the user and the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:28 AM
Security Audit — agent-trust-hub — input-vat-deduction-check-free