payroll-withholding-reconcile-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests employee payroll data provided by the user, which serves as an ingestion point for untrusted data. The
scripts/run.mjsscript reads input files directly into the execution context. There are no explicit boundary markers or instructions to ignore embedded content within the processed data. While the tool environment includes the Bash tool, the analysis engine itself is implemented in pure JavaScript and lacks network or file-write capabilities. Basic numeric sanitization is performed by thenormNumberfunction. - [EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing a commerce tool using
npx -y @alipay/agent-payment@latest install. This triggers a download and execution of code from the official Alipay registry, which is a recognized well-known financial service.
Audit Metadata