ecommerce-amazon-product-database-search

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a Python script (amazon_product_database_search.py) to process search requests. The script safely parses JSON input from arguments and handles API interactions using standard libraries.
  • [EXTERNAL_DOWNLOADS]: The skill connects to an external API endpoint (defined by NEXSCOPE_PROXY_BASE) to retrieve Amazon product data. These network operations are limited to the vendor's infrastructure as described in the documentation.
  • [DATA_EXFILTRATION]: API responses are saved to a local nexscope/ directory within the project or user's home folder. This persistence is intended for caching and data management, and is explicitly disclosed in the SKILL.md file.
  • [CREDENTIALS_UNSAFE]: The skill manages authentication through the NEXSCOPE_API_KEY environment variable. This is a secure and standard practice for AI agent skills to handle sensitive secrets without hardcoding them.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:13 AM
Security Audit — agent-trust-hub — ecommerce-amazon-product-database-search