inventory-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Node.js script (scripts/run.mjs) to process inventory data. This is the primary function of the skill and is performed locally on the user's machine.
- [EXTERNAL_DOWNLOADS]: The skill's documentation provides instructions for installing the @alipay/agent-payment package from a well-known service provider to enable optional features. This process is transparently documented and uses official registries.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface as it processes user-provided inventory tables. However, the data is handled by a deterministic script using strict numeric parsing and regular expressions, preventing the contents of the data from being interpreted as executable instructions or influencing the agent's behavior.
- Ingestion points: The skill reads inventory data from user-specified files or text inputs via scripts/run.mjs.
- Boundary markers: The skill processes data within a structured local execution flow, though it does not use specific delimiters within the text itself.
- Capability inventory: The skill utilizes the Bash and Read tools for local script execution and file access.
- Sanitization: Input data is sanitized through numeric normalization and regex-based column extraction within the local engine (scripts/engine/inventory-check.js).
Audit Metadata