amazon-keyword-research

Warn

Audited by Snyk on May 16, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (high risk: 1.00). The skill's required workflow and scripts (SKILL.md and scripts/research.sh / README_CN.md) explicitly fetch and ingest public, user-generated Amazon autocomplete suggestions from https://completion.amazon.com (and also pull Google Trends via trends.google.com and general web_search results) and then parse and act on that data to drive analysis and scoring, exposing the agent to untrusted third-party content that could contain injected instructions.

Issues (1)

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
MEDIUM
Analyzed
May 16, 2026, 04:21 AM
Issues
1
Security Audit — snyk — amazon-keyword-research