amazon-keyword-search-volume
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate utility for keyword search volume analysis and follows standard security best practices. The execution logic is transparent and correctly scoped to its described purpose.
- [COMMAND_EXECUTION]: The skill executes a bash script that handles user inputs such as keywords and marketplace parameters through environment variables passed to a Python subprocess. This architecture prevents shell injection attacks by avoiding direct interpolation of untrusted strings into command line arguments.
- [DATA_EXFILTRATION]: Network activity is restricted to the legitimate service endpoint
ai-factory.frevana.com. The skill correctly handles sensitive API tokens using environment variables and includes instructions to prevent the token from being exposed in the user-facing output. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the API response. It uses a Python-based validation step to ensure the response is a valid JSON object before it is returned to the agent context, which effectively mitigates the risk of processing malformed or malicious data payloads.
Audit Metadata