travel-standard-check-free

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill contains instructions for purchasing an upgrade via a third-party platform (SkillPay) inside a business operations tool, but it does not promote tokens, wallets, liquidity deposits, or cryptocurrency transfers.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The instruction text instructs the agent to run npx -y @alipay/agent-payment@latest install to install a remote package, constituting an operational runtime external dependency from an unverified public npm/Alipay source with medium provenance tier.