bggg-data-amazon

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script run_batch.py executes the internal amazon_review_scraper.py using subprocess.run. This is implemented securely by passing a list of arguments rather than a shell string, and critical parameters like ASINs are validated against a strict regular expression (^[A-Z0-9]{10}$) before execution.
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to the public woot.com AJAX API to fetch review data. These requests are restricted to the legitimate service required for the skill's stated purpose and target a well-known, established domain.
  • [DATA_EXPOSURE]: The skill processes and saves publicly available product reviews to local files. It includes logic for normalization and deduplication, ensuring that no sensitive local credentials or system files are accessed, modified, or exfiltrated during the process.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 01:34 AM
Security Audit — agent-trust-hub — bggg-data-amazon