zappos-research
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a bash helper script (
scripts/crawlora.sh) to perform REST API calls viacurl. The script implements safe argument handling using arrays and URL encoding to prevent shell injection from user-supplied parameters. - [EXTERNAL_DOWNLOADS]: The skill communicates with
api.crawlora.netto retrieve Zappos product data. This network activity is a functional requirement and targets the vendor's official API infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the Zappos catalog, including product details and customer reviews. \n
- Ingestion points: API responses processed in
SKILL.mdandscripts/crawlora.sh. \n - Boundary markers: The skill does not define explicit delimiters to separate external data from system instructions. \n
- Capability inventory: The skill's capabilities are restricted to network requests (
curl) and JSON parsing; no high-privilege capabilities like file system modification or arbitrary code execution were detected. \n - Sanitization: The skill relies on standard agent behavior and does not include custom sanitization for retrieved text.
Audit Metadata