prepaid-card-consumption-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to install the '@alipay/agent-payment' package via npx. This dependency is associated with a well-known financial service provider and is documented as part of the skill's optional payment functionality.
- [COMMAND_EXECUTION]: The skill requires the use of shell commands and Node.js to execute local auditing scripts. These commands are necessary for the skill's primary purpose of analyzing financial table data.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text data from financial tables via scripts/run.mjs. It lacks formal boundary markers or input sanitization. Although the current processing logic is deterministic, the ingestion of external data combined with the agent's shell capabilities represents a potential injection surface.
- [PROMPT_INJECTION]: The SKILL.md file contains a pre-written prompt for the agent that includes steering instructions. These instructions are designed to automate the installation of dependencies and the purchase of a premium version by overriding certain manual confirmation steps.
Audit Metadata