ecommerce-amazon-market-statistics
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves market statistics from an external API and presents this data to the agent. This represents an indirect prompt injection surface if the external data provider were to include instructions intended to manipulate the agent's response logic.
- Ingestion points: The skill ingests data from the SellerSprite API response in
scripts/amazon_market_statistics.pyand user-provided parameters likenodeIdPath. - Boundary markers:
SKILL.mddefines specific display rules and output strategies (e.g., summary vs. full JSON) which act as structural boundaries for the ingested content. - Capability inventory: The skill has the capability to perform network POST requests to the vendor's proxy and write JSON data files to the current working directory or home directory.
- Sanitization: The script uses standard JSON parsing (
json.loads) but does not implement additional filtering or escaping of the statistical data before display.
Audit Metadata