amazon-buy-box
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were found in the skill instructions or metadata.
- [EXTERNAL_DOWNLOADS]: The skill documentation mentions the use of a web_fetch tool to retrieve pricing and shipping information from Amazon product pages. This involves accessing a well-known service for data relevant to the skill's primary purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from Amazon product pages as described in SKILL.md. While boundary markers and sanitization for this external data are absent, the skill's capabilities are restricted to generating textual advice and strategic guidance, with no high-risk command execution or file system access, resulting in a minimal vulnerability surface.
Audit Metadata