ecommerce-amazon-traffic-keywords

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a local Python script scripts/amazon_traffic_keywords.py to process keyword research requests and interact with the NexScope API.\n- [EXTERNAL_DOWNLOADS]: The skill performs authenticated POST requests to an external API (defined by NEXSCOPE_PROXY_BASE) to retrieve Amazon traffic keyword datasets. These requests target official vendor infrastructure.\n- [INDIRECT_PROMPT_INJECTION]: The tool ingests data from external Amazon listings and keyword results.\n
  • Ingestion points: SellerSprite API response handled in scripts/amazon_traffic_keywords.py.\n
  • Boundary markers: None explicitly defined for raw data content.\n
  • Capability inventory: Network access (urllib.request.urlopen) and File write access (writes results to .json files in nexscope/ directory).\n
  • Sanitization: Results are handled as structured JSON data.\n- [SAFE]: The skill follows secure practices by using environment variables for sensitive API keys and isolating file operations to a dedicated nexscope/ directory within the user's project or home path.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 04:13 AM
Security Audit — agent-trust-hub — ecommerce-amazon-traffic-keywords