amazon-product-data
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Amazon marketplace data from the official Scavio API (api.scavio.dev) and references the langchain-scavio library for integration. These resources are official components provided by the skill author.- [INDIRECT_PROMPT_INJECTION]: The skill processes external content from Amazon product listings, which is a standard surface for indirect prompt injection.
- Ingestion points: Product data (titles, descriptions, features, and reviews) is ingested through the search, product, and offers API endpoints.
- Boundary markers: Data is returned in a structured JSON envelope, separating control instructions from data content.
- Capability inventory: The skill's primary capabilities are limited to performing network requests to the vendor's API endpoints.
- Sanitization: The instructions provide explicit guardrails, directing the agent to 'Never fabricate' data and to quote marketplace-specific text to prevent misinterpretation.
Audit Metadata