receivable-collection-plan-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation within SKILL.md provides instructions for the user to install an external package,
@alipay/agent-payment, using thenpxcommand. This is part of an optional upgrade path to a paid version of the tool. The package is associated with a well-known service provider. - [COMMAND_EXECUTION]: The skill leverages the
Bashtool to run its core engine viascripts/run.mjs. This script performs deterministic financial validations, such as verifying that ending balances equal the sum of initial balances, new billings, and payments. - [DATA_EXPOSURE]: The skill is designed to process sensitive financial data (accounts receivable). However, the engine implementation in
scripts/engine/receivable-collection-plan-check.jsis self-contained, uses only standard Node.js libraries, and explicitly contains no network-reaching code, ensuring data remains on the local machine.
Audit Metadata