linkfox-amazon-opportunity-search-by-metrics
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: A hardcoded Base64-encoded identifier is used in the
onboarding.pyscript as a static application ID for authentication requests. This is a common practice for client identification and does not expose user-specific secrets. - [EXTERNAL_DOWNLOADS]: The skill documentation and scripts advise users to install standard Python libraries (
requests,qrcode) if they are missing from the environment to enable full functionality. - [PERSISTENCE]: The onboarding guide provides standard shell configuration commands to help users persist their API keys as environment variables in profile files like
.zshrcor.bashrc. - [DATA_EXFILTRATION]: The skill correctly handles sensitive user information such as phone numbers and verification codes by transmitting them directly to the vendor's official authentication endpoints during the login process.
Audit Metadata