bggg-data-amazon
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
run_batch.pyexecutes the internalamazon_review_scraper.pyusingsubprocess.run. This is implemented securely by passing a list of arguments rather than a shell string, and critical parameters like ASINs are validated against a strict regular expression (^[A-Z0-9]{10}$) before execution. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to the public
woot.comAJAX API to fetch review data. These requests are restricted to the legitimate service required for the skill's stated purpose and target a well-known, established domain. - [DATA_EXPOSURE]: The skill processes and saves publicly available product reviews to local files. It includes logic for normalization and deduplication, ensuring that no sensitive local credentials or system files are accessed, modified, or exfiltrated during the process.
Audit Metadata