amazon-product-research
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external web pages, creating a potential surface for indirect prompt injection. \n
- Ingestion points: The skill fetches Amazon product pages, review text, and search results using
web_fetchandweb_searchtools. \n - Boundary markers: The instructions do not define specific delimiters or directives to isolate external content from the agent's core instructions. \n
- Capability inventory: The skill possesses capabilities for web fetching and data aggregation; however, it lacks dangerous capabilities such as file-system modification, subprocess execution, or unauthorized network exfiltration. \n
- Sanitization: There is no mention of sanitizing, escaping, or validating the external text content before the agent analyzes it. \n- [NO_CODE]: The skill consists exclusively of markdown documentation and YAML metadata, containing no executable scripts, binaries, or logic in external files.
Audit Metadata