amazon-daily-market-radar

Pass

Audited by Gen Agent Trust Hub on Jun 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill communicates exclusively with api.apiclaw.io. This is the official API endpoint for APIClaw, which is the vendor's own infrastructure according to the skill's metadata and author information.
  • [SAFE]: Sensitive data management is handled correctly. The skill requires an API key provided via environment variables (APICLAW_API_KEY) or a local config.json file, avoiding hardcoded secrets.
  • [SAFE]: File system operations are restricted to the skill's base directory for persistence (data/ folder for snapshots) and a standard temporary path for review processing, which is necessary for its change-detection functionality.
  • [SAFE]: Although the skill processes Amazon reviews (untrusted external data), which presents a surface for indirect prompt injection, it uses strict JSON schema constraints and extraction instructions that minimize the risk of the agent misinterpreting data as instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 22, 2026, 12:17 PM
Security Audit — agent-trust-hub — amazon-daily-market-radar