ecommerce-amazon-keyword-overview
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied keywords which are then used in API requests to retrieve market data. The results are displayed back to the user, creating a standard data ingestion surface. There are no explicit boundary markers or sanitization routines for the keyword data, but the functionality is limited to quantitative keyword metrics.\n
- Ingestion points: The
keywordparameter inscripts/amazon_keyword_overview.pyand instructions inSKILL.md.\n - Boundary markers: Absent.\n
- Capability inventory: File writing to the local project directory and network POST requests to the vendor API using
urllib.request.urlopen.\n - Sanitization: Absent.\n- [COMMAND_EXECUTION]: The skill involves the execution of a Python script (
scripts/amazon_keyword_overview.py) to process keyword data and interface with the NexScope API.\n- [SAFE]: The skill targets vendor-owned infrastructure for its API calls and manages credentials using environment variables, aligning with standard developer tooling practices. It also implements local caching and structured output management.
Audit Metadata