linkfox-junglescout-keyword-by-asin

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The documentation mentions calling helper python scripts python scripts/junglescout_keyword_by_asin.py and python scripts/onboarding.py. These operations are well-scoped, explicitly defined, and handle deterministic operations for local text/JSON caching and authenticated vendor communication without exposing any arbitrary execution vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The scripts use standard technology platforms and library modules such as python's urllib.request or requests (if available) to talk exclusively to official vendor domains (*.linkfox.com and *.linkfox-ai.com endpoints). All interactions are dedicated entirely to the core capability of the tool (Amazon keyword research metrics and onboarding management) and strictly obey the safe practices specified for vendor resources.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data (user-supplied ASIN strings, filter metrics) to form structured JSON payload attributes for backend queries. Adequate input boundary restrictions exist because data is isolated within arrays and specific programmatic conditions (e.g., standard 10-character alphanumeric parameters check), preventing it from executing raw instructions within the framework layout.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:11 AM