alipay-upload
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the use of the
sauCLI tool to perform various tasks such as logging in to Alipay, checking account status, and uploading video files. This involves executing shell commands with parameters for file paths and metadata. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data. 1. Ingestion points:
--file,--title,--desc, and--tagsarguments in SKILL.md. 2. Boundary markers: None present. 3. Capability inventory: Execution ofsaucommands via shell as described in SKILL.md. 4. Sanitization: None explicitly defined in the skill text. While this creates a potential injection surface, it is a standard pattern for this utility and no malicious intent was detected.
Audit Metadata