ClawHub
Back to skill

Security audit

Alipay Pay For Service

Security checks for vulnerabilities and agentic risk

Overview

This payment skill is mostly purpose-aligned, but it can start live Alipay payment and wallet workflows from broad payment language without a clear hard confirmation gate.

Install only if you intentionally want an agent to help with Alipay payment links. Before using it, verify the npm package integrity, keep control of each order confirmation, and do not allow the agent to run wallet authorization or payment submission unless the exact merchant, amount, payment method, and Alipay cashier link are visible and correct.

SkillSpector

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Vague Triggers

Medium
Confidence
92% confidence
Finding
The trigger conditions are broad enough to activate on generic payment-related language such as '支付/付款/买单/结账' without requiring a verified Alipay cashier URL or a stronger confirmation boundary. In a payment skill, over-triggering is risky because it can route ordinary conversation into a live payment workflow, increasing the chance of unintended payment handling, misleading prompts, or premature execution of payment-related steps.

Static analysis

No suspicious patterns detected.