skills/serendipityoneinc/apiclaw-skills/Amazon Market Entry Analyzer — GO/CAUTION/AVOID Verdicts/Gen Agent Trust Hub
Amazon Market Entry Analyzer — GO/CAUTION/AVOID Verdicts
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats detected. The skill uses a dedicated Python script to perform API calls to its official backend infrastructure at
api.apiclaw.io. - [SAFE]: API key management follows standard secure practices, allowing the use of environment variables or a local configuration file instead of hardcoded secrets.
- [PROMPT_INJECTION]: The skill processes untrusted Amazon review data, which is an indirect prompt injection surface. This risk is addressed by the following evidence chain:
- Ingestion points: External data is ingested via the
reviews-rawandrealtime/productcommands inscripts/apiclaw.py. - Boundary markers: The instructions in
SKILL.mdutilize triple-quote delimiters ("""{text}""") to isolate untrusted content. - Capability inventory: The skill's capabilities are limited to network requests to its primary API service and lack dangerous operations such as arbitrary file writing or shell execution.
- Sanitization: The agent is explicitly instructed to extract only explicitly mentioned information and to format all analysis into a rigid JSON schema, which prevents the interpretation of malicious instructions within the reviews.
Audit Metadata