walmart-product-reviews
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates with the vendor's official API at ai-factory.frevana.com to fetch product review data.
- [SAFE]: The bash script performs input validation on parameters such as
--pageand--ratingto ensure they are integers within expected ranges before execution. - [SAFE]: To prevent command injection, the script uses an inline Python block to safely construct the JSON payload from environment variables rather than direct string concatenation.
- [SAFE]: Sensitive authentication tokens are handled via environment variables or secure shell prompts, and instructions explicitly advise the agent not to echo these tokens back to the user.
- [SAFE]: The script validates that the API response is valid JSON before saving it to the filesystem or returning it to the agent, providing a layer of protection against malformed data.
Audit Metadata