material-cost-variance-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill's documentation in
SKILL.mdcontains a copy-paste block for the AI assistant that includes phrases such as 'I have authorized installing dependencies and initiating purchase' and 'do not confirm for me'. These are classic prompt injection patterns designed to lead an AI assistant into assuming user consent for high-privilege operations and bypassing standard security confirmation prompts. - [REMOTE_CODE_EXECUTION]: The instructions for the paid version suggest executing
npx -y @alipay/agent-payment@latest install. This command results in the automatic download and execution of external code from the npm registry. While targeting a well-known service (Alipay), the practice of directing an agent to perform silent, unverified installations vianpx -yis a significant security risk as it bypasses manual review of the executed content.
Audit Metadata