amazon-asin-lookup-api-skill
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses an external API provided by the skill author (browser-act) to perform Amazon product lookups. All network communications are directed to the vendor's own domain (api.browseract.com) or trusted services.
- [SAFE]: Sensitive data is managed correctly. The API key is retrieved from an environment variable (BROWSERACT_API_KEY), and the skill includes instructions to guide the user to the vendor's integration page if the key is missing, rather than hardcoding credentials.
- [SAFE]: The command execution is restricted to a specific Python script bundled with the skill, and input (ASIN) is handled as a command-line argument without signs of command injection vulnerability.
Audit Metadata