ecommerce-1688-product-detail
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious patterns were detected. The skill implements standard research proxy functionality with appropriate constraints.
- [COMMAND_EXECUTION]: The skill executes a Python script to interact with the NexScope API. Parameters are correctly passed as a JSON object, and the script uses safe parsing methods to prevent command injection.
- [EXTERNAL_DOWNLOADS]: The skill communicates with
https://api.nexscope.ai, the official API gateway for the vendor. This is a documented, legitimate network operation targeting vendor-controlled infrastructure. - [CREDENTIALS_UNSAFE]: The skill avoids hardcoding secrets, instead instructing the agent to use the
NEXSCOPE_API_KEYenvironment variable for authentication. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied identifiers and currency codes. It mitigates injection risks by providing explicit instructions for the agent to validate all parameters against the API reference and reject any undocumented fields.
Audit Metadata