linkfox-amazon-store-report

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads Amazon store reports from Amazon's infrastructure (S3 pre-signed URLs) and interacts with the author's own API domains (linkfox-ai.com, linkfox.com) for onboarding and proxy services. These operations are essential to the skill's primary function.
  • [COMMAND_EXECUTION]: The main script scripts/get_report.py uses subprocess.run to execute a local sibling script scripts/check_auth_dependency.py. This is used to verify that the required authentication skill is installed in the agent's environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external Amazon reports.
  • Ingestion points: scripts/get_report.py downloads and extracts report files (TSV, XML, JSON) which are then presented to the agent.
  • Boundary markers: Present in SKILL.md under "Display Rules," which instructs the agent to only present the data and avoid business interpretation.
  • Capability inventory: Subprocess execution, local file writing, and starting a local HTTP server for file delivery in scripts/get_report.py.
  • Sanitization: No specific sanitization of report content is performed before presentation to the user/agent.
  • [DYNAMIC_EXECUTION]: The script scripts/get_report.py includes a utility that starts a temporary, short-lived HTTP server bound to 127.0.0.1. This is designed to facilitate the download of extracted report files to the user's local machine.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:11 AM