linkfox-jiimore-get-niche-review-from-keyword
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and displays Amazon niche market reviews and sentiment details from an external data provider, creating a vector for indirect prompt injection if external review content contains malicious instructions.
- Ingestion points:
scripts/jiimore_get_niche_review.pyprocesses external content includingreviewExample,topic, andnicheNamevia API endpoints. - Boundary markers: Absent. The skill does not wrap the ingested review comments or data in distinct delimiters to separate them from system context.
- Capability inventory: Includes local file-writing capabilities to cache full JSON responses under the
<cwd>/linkfox/directory. No arbitrary subprocess execution or dynamic code execution capabilities are present. - Sanitization: Absent. The external text strings are rendered into user view without validation or escaping filters.
Audit Metadata