ecommerce-amazon-ads-reporting-api
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/amazon_ads_report_workflow.py) to manage a multi-step report lifecycle (start, poll, download). This is the intended purpose of the skill. - [EXTERNAL_DOWNLOADS]: The skill communicates with a backend gateway defined by
NEXSCOPE_PROXY_BASEto fetch report data. The code includes strict limits (20 MiB) on download size and enforces safe file writing practices. - [SAFE]: File writing in
scripts/amazon_ads_report_workflow.pyincludes robust security checks: it prevents overwriting files unless explicitly requested, rejects writing to symlinks, and uses atomic temporary files to ensure data integrity. - [SAFE]: The skill follows secret management best practices by requiring credentials (
NEXSCOPE_API_KEY) to be provided via environment variables rather than hardcoding them or requesting them from the user at runtime.
Audit Metadata