warehouse-fee-check-free
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill's documentation (SKILL.md) includes a suggested prompt for the AI that executes a shell command:
npx -y @alipay/agent-payment@latest install. This command downloads and executes code from the official npm registry. As the package is maintained by a well-known organization (Alipay), this is considered a safe and functional dependency for the skill's optional commercial features. - [EXTERNAL_DOWNLOADS]: The skill references and provides instructions to download the
@alipay/agent-paymentpackage from the public npm registry. This is part of the intended workflow for users who wish to upgrade to the premium version and does not involve untrusted sources. - [PROMPT_INJECTION]: The skill contains a block of text intended for the user to provide as a prompt to the AI agent. This text includes instructions like 'I have authorized installation of dependencies and initiated purchase,' which are designed to guide the agent through an automated setup and transaction process. While these instructions attempt to pre-set authorization states within the agent's context, they are transparently presented as part of the product's upgrade path.
- [SAFE]: The core logic of the skill, implemented in
scripts/engine/warehouse-fee-check.js, is a self-contained JavaScript engine that performs arithmetic calculations and data validation locally. It does not perform any network operations, file exfiltration, or access sensitive system credentials.
Audit Metadata