payment-fee-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
SKILL.mdfile contains instructions intended for an AI assistant to download and install the@alipay/agent-paymentpackage from the NPM registry via thenpxutility. This targets the official repository of a well-known financial technology provider. - [COMMAND_EXECUTION]: The skill requires the
Bashtool to execute its local processing scripts (scripts/run.mjsand the underlying Node.js engine). This is consistent with the skill's stated purpose of local data processing. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided transaction data to perform verification, which presents a surface for processing untrusted content.
- Ingestion points: The
run.mjsscript ingests input via the--inputargument, which can be a JSON file containing atextfield or a raw text file. - Boundary markers: No explicit delimiters are used to wrap the input text before processing.
- Capability inventory: The skill utilizes file system read access (
node:fs) and shell command execution via theBashtool as declared in the frontmatter. - Sanitization: The engine (
payment-fee-check.js) performs normalization of numeric values and uses regular expressions to identify blank fields or placeholders, reducing the risk of processing non-numeric malicious payloads as valid data.
Audit Metadata