linkfox-amazon-store-report
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads Amazon store reports from Amazon's infrastructure (S3 pre-signed URLs) and interacts with the author's own API domains (linkfox-ai.com, linkfox.com) for onboarding and proxy services. These operations are essential to the skill's primary function.
- [COMMAND_EXECUTION]: The main script
scripts/get_report.pyusessubprocess.runto execute a local sibling scriptscripts/check_auth_dependency.py. This is used to verify that the required authentication skill is installed in the agent's environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external Amazon reports.
- Ingestion points:
scripts/get_report.pydownloads and extracts report files (TSV, XML, JSON) which are then presented to the agent. - Boundary markers: Present in
SKILL.mdunder "Display Rules," which instructs the agent to only present the data and avoid business interpretation. - Capability inventory: Subprocess execution, local file writing, and starting a local HTTP server for file delivery in
scripts/get_report.py. - Sanitization: No specific sanitization of report content is performed before presentation to the user/agent.
- [DYNAMIC_EXECUTION]: The script
scripts/get_report.pyincludes a utility that starts a temporary, short-lived HTTP server bound to127.0.0.1. This is designed to facilitate the download of extracted report files to the user's local machine.
Audit Metadata