skills/nexscope-ai/nexscope-ecommerce-skills/ecommerce-amazon-niche-info-by-keyword/Gen Agent Trust Hub
ecommerce-amazon-niche-info-by-keyword
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill was analyzed for common threat vectors and no malicious behavior was detected. Its operations are consistent with its documented purpose.
- [COMMAND_EXECUTION]: The skill executes a local script,
scripts/amazon_niche_info_by_keyword.py, which acts as a proxy client for the Jiimore API. The execution is standard for this type of agent skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the Jiimore API, creating a vulnerability surface where malicious instructions could theoretically be embedded in the market data.
- Ingestion points: API response ingested in
scripts/amazon_niche_info_by_keyword.pyviaurlopen. - Boundary markers: None explicitly implemented in the script logic, though the documentation suggests methods to minimize context pollution.
- Capability inventory: The script performs local file writes for caching (to the
nexscope/directory) and network requests to the vendor's API proxy. - Sanitization: The script parses JSON data but does not perform additional sanitization on string fields before saving or summarizing.
Audit Metadata