tax-incentive-eligibility-check-free

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (critical risk: 1.00). The skill contains instructions and code that promote and facilitate the purchase and installation of a paid counterpart product via external payment flows.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill contains instructions and code suggesting the agent execute npx -y @alipay/agent-payment@latest install to fetch and install a remote payment and dependency package from an unofficial/arbitrary repository channel, presenting an operational dependency with weak provenance.