juhe-enterprise-dd-pro-a2a@1.0.6
VERIFIED· install onlyPublisher claims: "企业尽调报告 Pro（标准版）：一次付费返回企业详细工商信息（基本信息、股东、主要人员、分支、变更、内嵌经营异常等），并汇总经营异常、被执行、失信、限制高消费等公开风险信号，输出带摘要灯的尽调报告。 基于 A2M（HTTP 402）收单协议。买家通过本 Skill 向卖家服务端发起请求，完成支付后获取相关结果。 调用过程仅上传查询用的企业名称或注册号/统一社会信用代码，无需提供手机号、身份证等其他个人隐私。 股东为自然人时不返回证件类型与证件号；机构股东可能返回公开的营业执照类标识。报告含法人姓名、股东、企业注册地址、信用代码等敏感公开信息，展示须最小化；若返回身份证号须脱敏展示（保留前6后4），禁止明文回显与日志落地，勿暗示已采集用户个人隐私。本技能不返回自然人住址/居住地址。 适用于合作前尽调、供应商/客户风险快检、核实企业是否存在失信/被执行/经营异常等场景。 注意：纯查工商档案（股东/法人/经营范围）且无风险尽调意图时，应使用 enterprise-details-a2a，不要触发本技能。 重要限制：风险类模块（经营异常/被执行/失信/限高）每次仅查最近一页而非全量；报告展示被执行/限高最多 15 条、失信最多 8 条，仅供参考，须向用户说明避免误会。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-08 and scored it 92/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
- **如检测未安装**，提示：通过 npx -y @alipay/agent-payment@latest install 帮我**安装开通支付宝AI钱包的能力**,安装后帮我**开启支付宝支付功能**Fix: Pin versions and sources; vendor anything fetched at install time.No other findings across 1,715 lines in 10 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.