amazon-rufus-qa
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads an official setup script from the vendor's own GitHub repository (
https://raw.githubusercontent.com/FinpeakInc/frevana-cli-releases/.../setup.sh). This behavior is expected as it manages the required local daemon for the skill's functionality. - [REMOTE_CODE_EXECUTION]: The skill executes a downloaded script via
bash. Since this script is sourced directly from the vendor's repository and is necessary for setting up the required environment, it is considered a legitimate operation. - [COMMAND_EXECUTION]: The shell scripts use standard practices, including
set -euo pipefailand argument validation. It executes a local binary (frevana) following a verified setup process. - [DATA_EXFILTRATION]: No evidence of unauthorized data exfiltration. The skill interacts with a local daemon on port 12306 to process Amazon product data as requested by the user.
Audit Metadata