ecommerce-amazon-asin-traffic-summary

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a standard API client for Amazon traffic analysis. All network communication is directed to the vendor's infrastructure using environment-variable-configured base URLs and keys. The skill handles data by saving it to structured JSON files in the workspace, which is a common and safe pattern for data-intensive tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external API (Amazon product metadata) which represents a theoretical injection surface.
  • Ingestion points: API responses processed in scripts/amazon_asin_traffic_summary.py and saved to the filesystem.
  • Boundary markers: The agent is instructed to use structured tools to read the data, reducing direct exposure.
  • Capability inventory: The skill performs file writes and network requests to the configured API endpoint.
  • Sanitization: Data is handled as structured JSON, though specific text fields like product titles are not explicitly sanitized.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:12 AM
Security Audit — agent-trust-hub — ecommerce-amazon-asin-traffic-summary