prepaid-card-consumption-check-free

Fail

Audited by Snyk on Sep 16, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E004: Prompt injection detected in skill instructions.

  • Potential prompt injection detected (critical risk: 1.00). The skill contains instructions directing the user's AI assistant to execute external payment and installation commands through SkillPay.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.70). The skill instructs the AI agent to execute npx -y @alipay/agent-payment@latest install via text prompts, which fetches and installs code from an unverified external package repository at runtime.

Issues (2)

E004
CRITICAL

Prompt injection detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 16, 2026, 11:28 AM
Issues
2
Security Audit — snyk — prepaid-card-consumption-check-free