listing-keyword-optimizer
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data, such as competitor listings and product details fetched from Amazon. This represents an indirect prompt injection surface; however, the risk is mitigated by the script's tokenization and lexical cleaning logic, which transforms raw text into structured keyword data before it is presented back to the AI agent.
- [DATA_EXFILTRATION]: Network communication is limited to the authorized vendor's infrastructure using the
NEXSCOPE_PROXY_BASEenvironment variable. The skill correctly manages sensitive credentials by accessing theNEXSCOPE_API_KEYthrough the environment rather than hardcoding it. - [COMMAND_EXECUTION]: The skill utilizes local Python scripts (
listing_keyword_optimizer.pyandecommerce_chart_helpers.py) for data processing and chart generation. These scripts use standard, well-known libraries and do not attempt to gain elevated privileges or access sensitive system directories.
Audit Metadata