amazon-search

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a bash script to coordinate searches, which includes calling curl and python3. These operations are well-scoped to the skill's primary purpose of querying the Amazon search API and validating the results.
  • [DATA_EXPOSURE]: The skill handles an API token (FREVANA_TOKEN). It follows best practices by instructing the agent not to echo the token back to the user and uses standard environment variable/argument passing mechanisms.
  • [EXTERNAL_DOWNLOADS]: The script makes network requests to ai-factory.frevana.com. This is the intended endpoint for the search service and does not involve downloading or executing arbitrary remote code.
  • [DYNAMIC_EXECUTION]: The script uses python3 to safely generate JSON payloads and validate API responses. The Python code is embedded as a heredoc, preventing injection from external data sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 08:52 AM
Security Audit — agent-trust-hub — amazon-search