linkfox-amazon-store-fulfillment-inbound

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/_spapi_fulfillment_inbound_common.py uses subprocess.run to execute a local verification script scripts/check_auth_dependency.py to confirm that required skill dependencies are present in the environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes external data from the Amazon Selling Partner API (SP-API), which is then incorporated into the agent's context. The skill mitigates risks by summarizing large JSON responses.
  • [EXTERNAL_DOWNLOADS]: The skill fetches shipping labels and compliance documentation via URIs provided by the Amazon SP-API, using official endpoints for document retrieval.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:11 AM