weekly-business-review
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches business metrics from the DataDoe MCP service at mcp.datadoe.com. This is a vendor-owned resource used for the skill's primary analytical functions.
- [COMMAND_EXECUTION]: Executes MCP tools including sellers_and_vendors_list and exports_create to access and analyze Amazon seller data.
- [PROMPT_INJECTION]: Ingests SKU and product data from external Amazon sources, presenting an indirect prompt injection surface. This is classified as low risk as the skill's capabilities are limited to reporting and it does not have access to sensitive local files or system-level commands. Ingestion points: amazon_profit_by_sku_and_date. Boundary markers: Not present. Capability inventory: Data retrieval and HTML generation only. Sanitization: None identified.
Audit Metadata