amazon-market-entry-analyzer
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local script
scripts/zoodata.pyto perform market research tasks and handle data aggregation. This is standard functionality for the skill's purpose. - [EXTERNAL_DOWNLOADS]: Communicates with the vendor's official API at
api.zoodata.aito retrieve Amazon product, brand, and pricing data. These requests are made to a trusted vendor domain. - [PROMPT_INJECTION]: The skill analyzes Amazon product reviews, which constitutes an indirect prompt injection surface as reviews are untrusted third-party data. The skill implements robust mitigations for this risk.
- Ingestion points: Raw Amazon reviews are ingested in
SKILL.mdusing thezoodata.py reviews-rawcommand. - Boundary markers: The
review-tag-prompttemplate inscripts/zoodata.pywraps untrusted content in triple-quote delimiters and provides explicit instructions for the AI to extract only mentioned facts. - Capability inventory: The skill's capabilities are limited to data analysis, reporting, and executing its own CLI tool for API access.
- Sanitization: The Python script truncates review text to 500 characters and processes data through standard JSON parsing to prevent malformed input issues.
Audit Metadata