platform-settlement-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The core logic is implemented in a local Node.js script (
platform-settlement-check.js) that performs arithmetic validation on settlement data. The code uses standard libraries and does not initiate any network connections or access sensitive system files. - [PROMPT_INJECTION]: The
SKILL.mdfile contains a section titled '需要完整档时（可选）' which provides a pre-written prompt for the user to send to the AI. This prompt contains instructions such as 'I have authorized the installation of dependencies and the initiation of a purchase,' which is a technique used to guide the AI to bypass potential confirmation prompts for high-risk actions. However, it also includes a clause requiring the user's manual confirmation for actual payments, mitigating the risk. - [EXTERNAL_DOWNLOADS]: The documentation suggests the use of
npx -y @alipay/agent-payment@latest installto upgrade to a paid version. This involves downloading and executing code from a well-known service (Alipay/Ant Group), which is considered a safe external reference within the context of the vendor's documented upgrade path.
Audit Metadata