google-shopping-light-search
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash script (
scripts/search_google_shopping_light.sh) which executescurlandpython3. This is the intended primary purpose of the skill to fetch and validate API data. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
ai-factory.frevana.comwhich is the vendor's own API domain. This is expected behavior for a search skill. - [CREDENTIALS_UNSAFE]: The script handles an API token (
FREVANA_TOKEN). It follows safe practices by reading it from environment variables and explicitly advising the user not to echo the token back.
Audit Metadata