amazon-negative-keywords

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze Amazon search term reports, which are external, untrusted data sources that could potentially contain malicious instructions (indirect prompt injection).
  • Ingestion points: The skill instructs the agent to "Review search term reports across all campaigns" and "Analyze search term data" (SKILL.md).
  • Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are provided in the prompt templates to handle potentially malicious search term strings.
  • Capability inventory: The skill is primarily focused on text analysis and report generation; it does not explicitly call subprocesses or perform network operations during the data analysis phase.
  • Sanitization: There are no instructions for the agent to sanitize or filter the content of the search terms before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 10:19 AM
Security Audit — agent-trust-hub — amazon-negative-keywords