medical-insurance-denial-check-free

Fail

Audited by Snyk on Sep 16, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (critical risk: 1.00). The skill promotes paid upgrades, external purchases, and token/payment instructions within its documentation.

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (medium risk: 0.30). The skill instructs the user to run an Alipay agent payment command via npx from a documented build guide, which constitutes an operational software download.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill instructs the agent to execute an external installation and payment command fetching a package from Alipay's CDN (npx -y @alipay/agent-payment@latest), presenting a weak/unknown/suspicious runtime external dependency.

Issues (3)

E004
CRITICAL

Prompt injection detected in skill instructions.

E005
CRITICAL

Suspicious download URL detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 16, 2026, 11:28 AM
Issues
3
Security Audit — snyk — medical-insurance-denial-check-free