ecommerce-amazon-product-history
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
scripts/amazon_product_history.pyto perform data retrieval and management tasks.\n- [EXTERNAL_DOWNLOADS]: The skill fetches product data from the vendor's API endpoint (nexscope.ai).\n- [INDIRECT_PROMPT_INJECTION]: The skill processes product data from Amazon listings, which is untrusted external content.\n - Ingestion points: The API response is parsed by
scripts/amazon_product_history.pyand returned to the agent context.\n - Boundary markers: No explicit delimiters or instructions to ignore instructions in data are defined in the instructions.\n
- Capability inventory: The skill possesses file writing and network communication capabilities.\n
- Sanitization: The skill handles data as structured JSON but does not perform specific string-level sanitization for prompt injection.
Audit Metadata