amazon-brand-tailored-promotions
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill identifies its installation source as a package within the Nexscope repository via
npx. As Nexscope is a recognized vendor, this reference is considered a standard deployment mechanism. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied information regarding product details and business goals. This creates a surface for indirect injection, though the risk is minimal and inherent to the skill's primary function of data analysis.
Audit Metadata