overdue-interest-check-free

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The skill promotes purchasing a paid full version via a third-party platform and guides the user to install agent payment tools.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow processes user-supplied spreadsheet text files (--input) containing financial data and text rows which are ingested and parsed by the local script.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The instructions instruct the agent to run npx -y @alipay/agent-payment@latest install from an external repository locator to install a payment and onboarding package at runtime, presenting a weak/unknown provenance operational dependency.