amazon-rank-tracker
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external websites to analyze search rankings, which presents a surface for indirect prompt injection if those websites contain malicious content designed to influence the AI.
- Ingestion points: Search result pages from
amazon.comand index verification data fromgoogle.com(retrieved viaweb_fetch). - Boundary markers: The prompt instructions do not specify clear delimiters or "ignore" instructions for the data retrieved from external sources.
- Capability inventory: The skill primarily generates strategic recommendations and analysis reports; no dangerous system commands, file-writing, or administrative operations were identified.
- Sanitization: The instructions do not define specific sanitization or validation logic for the fetched search result data.
- [DATA_EXFILTRATION]: The skill performs network operations using
web_fetchto retrieve ranking snapshots fromamazon.comand performs index validation using Google Search. These network requests are directed to well-known services and are standard for the skill's stated purpose of keyword ranking analysis.
Audit Metadata