stamp-duty-base-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The
SKILL.mdfile contains a pre-defined instruction block for the AI agent to facilitate an upgrade to a paid version. This block includes directives that claim the user has already authorized certain actions, such as dependency installation. This is a technique used to influence the agent's response to security confirmation prompts by providing pre-recorded user consent within the skill's content. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to install the
@alipay/agent-paymentpackage from the npm registry usingnpx. This facilitates the installation of payment tools from a well-known service provider. - [COMMAND_EXECUTION]: The upgrade instructions for the agent involve executing shell commands (
npx) to install software on the host system. This represents an instruction to execute external code.
Audit Metadata