amazon-search
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The bash script
scripts/search_amazon.shexecutes system commands includingcurlto interact with the external API andpython3for data processing. - [EXTERNAL_DOWNLOADS]: The skill retrieves product search data from
https://ai-factory.frevana.comwhich is necessary for its core functionality. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from an external API, which could potentially contain malicious instructions targeting the agent.
- Ingestion points: API responses retrieved from
ai-factory.frevana.comwithinscripts/search_amazon.sh. - Boundary markers: The instructions in
SKILL.mddo not implement delimiters or warnings to ignore instructions embedded in the search results. - Capability inventory: The skill includes capabilities for network requests (
curl), system command execution (python3), and writing data to local files (cpcommand toOUTPUT_PATH). - Sanitization: The skill returns the API response body unchanged without performing sanitization or filtering of the content.
- [DYNAMIC_EXECUTION]: The bash script utilizes Python heredocs to generate and execute code at runtime for constructing JSON payloads and validating API responses.
Audit Metadata