amazon-negative-keywords

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external Amazon search term reports provided by the user, which presents a surface for potential indirect prompt injection. \n
  • Ingestion points: User-supplied search term reports (SKILL.md Step 3). \n
  • Boundary markers: The instructions lack explicit delimiters or specific warnings to ignore embedded instructions within the reports. \n
  • Capability inventory: None. The skill does not possess capabilities for network access, file system modifications, or subprocess execution. \n
  • Sanitization: No data validation or input filtering is specified.
  • [SAFE]: The skill instructions and metadata contain no malicious command execution, remote scripts, obfuscation, or persistence mechanisms. Its functionality is strictly limited to text-based analysis and strategic recommendations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 01:52 PM