overtime-pay-check-free
Fail
Audited by Snyk on Sep 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (critical risk: 1.00). The skill contains instructions and code designed to facilitate the purchase of a paid tier product via cryptocurrency/payment instructions, which violates the critical safety restriction against promoting or soliciting financial transfers or purchases inside a non-financial skill.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.70). The skill contains instructions for the AI assistant to install a package via
npx -y @alipay/agent-payment@latest installfrom an external repository locator (https://skillpay.alipay.com/buildguide.md), which constitutes an unverified runtime external dependency with high provenance risk.
Issues (2)
E004
CRITICALPrompt injection detected in skill instructions.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata