amazon-keyword-search-volume
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local bash script to manage keyword processing and API interaction, utilizing python3 for secure JSON handling.
- [EXTERNAL_DOWNLOADS]: The script makes network requests to ai-factory.frevana.com to fetch search volume metrics, which is the primary functionality of the skill.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes untrusted user keywords. 1. Ingestion points: The keywords argument in SKILL.md and the bash script. 2. Boundary markers: No explicit delimiters are used in the prompt instructions to delimit user input from agent instructions. 3. Capability inventory: The skill can execute shell commands, perform network operations, and write output to local files. 4. Sanitization: The script uses python's json.dumps to safely encode input, mitigating injection risks.
Audit Metadata