linkfox-amazon-store-fulfillment-inbound
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/_spapi_fulfillment_inbound_common.pyusessubprocess.runto execute a local verification scriptscripts/check_auth_dependency.pyto confirm that required skill dependencies are present in the environment. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes external data from the Amazon Selling Partner API (SP-API), which is then incorporated into the agent's context. The skill mitigates risks by summarizing large JSON responses.
- [EXTERNAL_DOWNLOADS]: The skill fetches shipping labels and compliance documentation via URIs provided by the Amazon SP-API, using official endpoints for document retrieval.
Audit Metadata