logistics-storage-fee-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references the installation of an external tool via
npx -y @alipay/agent-payment@latestand links to theskillpay.alipay.comdomain. These resources are associated with a well-known financial technology service provider. - [INDIRECT_PROMPT_INJECTION]: The
SKILL.mdfile includes a pre-formatted instruction block designed to guide an AI agent through a multi-step upgrade process. - Ingestion points: The
SKILL.mddocumentation serves as the source of instructions. - Boundary markers: Absent; the instructions are intended for direct adoption by the agent upon user request.
- Capability inventory: The skill uses the
Bashtool to run local Node.js scripts and documentation describes interaction with the@alipay/agent-paymenttool. - Sanitization: None; the process relies on the user providing the instruction to the agent.
- [COMMAND_EXECUTION]: The skill provides a CLI wrapper (
scripts/run.mjs) and utilizes theBashtool to execute local Node.js scripts for deterministic data analysis. The execution is confined to the local environment and the skill's specific invoice-checking purpose.
Audit Metadata