amazon-search
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash script to coordinate searches, which includes calling
curlandpython3. These operations are well-scoped to the skill's primary purpose of querying the Amazon search API and validating the results. - [DATA_EXPOSURE]: The skill handles an API token (
FREVANA_TOKEN). It follows best practices by instructing the agent not to echo the token back to the user and uses standard environment variable/argument passing mechanisms. - [EXTERNAL_DOWNLOADS]: The script makes network requests to
ai-factory.frevana.com. This is the intended endpoint for the search service and does not involve downloading or executing arbitrary remote code. - [DYNAMIC_EXECUTION]: The script uses
python3to safely generate JSON payloads and validate API responses. The Python code is embedded as a heredoc, preventing injection from external data sources.
Audit Metadata